On Thu, Jul 30, 2020 at 12:03:52PM +0200, William Lallemand wrote: > On Fri, Jul 17, 2020 at 04:47:10PM +0900, Sehoon Kim wrote: > > Hi, > > > > ssl-skip-self-issued-ca option does not work. > > commit "83cb2cb7" seems to remove this option. > > > > > > Best regards, > > Seri > > > I suppose you were talking about commit f187ce6. > > There is indeed a problem there, because a previous patch was breaking > the compatibility with the bundles... > > I'm not sure how to fix this since we can't skip the the Root CA with > SSL_CTX_set1_chain. Maybe we could move it from the chain and move it to > the issuer. > >
Hello, The problem was fixed with the commit bf298af ("BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option"). Could you check that it works for your use-case ? Thanks. -- William Lallemand