https://issues.apache.org/bugzilla/show_bug.cgi?id=56410

--- Comment #4 from Kaspar Brand <[email protected]> ---
Created attachment 31530
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31530&action=edit
Also clear the error queue before calling SSL_CTX_use_certificate[_chain]_file

Thanks a lot for your detailed report, which was very helpful when tracking
down the problem. It's the following issue in OpenSSL, in the end:

  https://rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=1513

which was fixed in OpenSSL 0.9.8h:

  *) Clear error queue in SSL_CTX_use_certificate_chain_file()

     Clear the error queue to ensure that error entries left from
     older function calls do not interfere with the correct operation.
     [Lutz Jaenicke, Erik de Castro Lopo]

We can add a workaround for this in mod_ssl, see the attached patch. Could you
give it a try and report back if it solves the issue for you?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to