Hi Manu,

Could you add a block '{ }' or move the comment on the comment on following 
lines:

+                       if (!((ssl_conf && ssl_conf->no_ca_names) || 
bind_conf->ssl_conf.no_ca_names))
+                               /* set CA names fo client cert request, 
function returns void */
+                               SSL_CTX_set_client_CA_list(ctx, 
SSL_load_client_CA_file(ca_file));

Is it quite confusing, and we want to avoid further mistakes.


A second point, i don't know which is the current policy about the keyword 
prefix "no-" in configuration statements, but
we usually take care using this word.

Willy, would you clarify that point?

R,
Emeric

On 07/10/2017 05:45 PM, Emmanuel Hocdet wrote:
> 
> Hi Bas,
> 
>> Le 10 juil. 2017 à 17:05, Wolvers, Bas <[email protected]> a écrit :
>>
>> Hi Emmanuel,
>>
>> I finally found time to test your patch.
>>
>> It works, but you can't seem to turn it off.
>> no-ca-names seems to be active regardless of the option in the config file.
>>
> 
> oops i fail the double negation.
> fix patch include.
> 
>> I think I'll find time tomorrow to find out if it’s the global option or 
>> not, but my time is a bit limited unfortunately.
>>
>> Best regards,
>>
>> Bas
> 
> Thanks for testing!
> 
> Manu
> 
> 
> 
> 
> 
> 


Reply via email to