This repository has been archived by the owner on Jun 30, 2021. It is now read-only.
Use SSL_CTX_use_certificate_chain_file instead of SSL_CTX_use_certificate_file in evhtp_ssl_init #26
Comments
NathanFrench
added a commit
that referenced
this issue
Dec 6, 2017
(reference #26) Via @mannol ``` Currently, libevhtp is using SSL_CTX_use_certificate_file to load a certificate file. That function lacks the ability to load the pinned certificate chain (if any) which has a consequence of connecting clients not trusting the received certificate. By using SSL_CTX_use_certificate_chain_file we give the libssl the ability to read and send the entire certificate chain (if any), which clients can check against. ```
|
Awesome; thank you very much! |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Currently, libevhtp is using
SSL_CTX_use_certificate_fileto load a certificate file. That function lacks the ability to load the pinned certificate chain (if any) which has a consequence of connecting clients not trusting the received certificate. By usingSSL_CTX_use_certificate_chain_filewe give the libssl the ability to read and send the entire certificate chain (if any), which clients can check against.The text was updated successfully, but these errors were encountered: