On Thu, Aug 09, 2012 at 10:39:24AM -0700, Ben Pfaff wrote:
> @@ -228,7 +230,7 @@ new_ssl_stream(const char *name, int fd, enum
> session_type type,
> VLOG_ERR("CA certificate must be configured to use SSL");
> retval = ENOPROTOOPT;
> }
> - if (!SSL_CTX_check_private_key(ctx)) {
> + if (!retval && !SSL_CTX_check_private_key(ctx)) {
> VLOG_ERR("Private key does not match certificate public key: %s",
> ERR_error_string(ERR_get_error(), NULL));
> retval = ENOPROTOOPT;
Oops, that solves a different problem. I've broken it out as a
separate commit:
http://openvswitch.org/pipermail/dev/2012-August/020255.html
_______________________________________________
dev mailing list
[email protected]
http://openvswitch.org/mailman/listinfo/dev
