Revert the order of the chain in Identity from PKCS12

sfackler · Dec 8, 2021 · 0f91cd7 · 0f91cd7
1 parent a512918
commit 0f91cd7
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/imp/openssl.rs b/src/imp/openssl.rs
@@ -163,7 +163,10 @@ impl Identity {
         Ok(Identity {
             pkey: parsed.pkey,
             cert: parsed.cert,
-            chain: parsed.chain.into_iter().flatten().collect(),
+            // > The stack is the reverse of what you might expect due to the way
+            // > PKCS12_parse is implemented, so we need to load it backwards.
+            // > https://github.com/sfackler/rust-native-tls/commit/05fb5e583be589ab63d9f83d986d095639f8ec44
+            chain: parsed.chain.into_iter().flatten().rev().collect(),
         })
     }