Hi,
I've applied this patch in 2.2.x repository.
It works well in any case.
Thank you!!
Seri
-----Original Message-----
From: "William Lallemand"<[email protected]>
To: "Sehoon Kim"<[email protected]>;
Cc: <[email protected]>; <[email protected]>;
Sent: 2020-08-11 (화) 00:17:20 (GMT+09:00)
Subject: Re: ssl-skip-self-issued-ca option does not work
On Thu, Jul 30, 2020 at 12:03:52PM +0200, William Lallemand wrote:
> On Fri, Jul 17, 2020 at 04:47:10PM +0900, Sehoon Kim wrote:
> > Hi,
> >
> > ssl-skip-self-issued-ca option does not work.
> > commit "83cb2cb7" seems to remove this option.
> >
> >
> > Best regards,
> > Seri
>
>
> I suppose you were talking about commit f187ce6.
>
> There is indeed a problem there, because a previous patch was breaking
> the compatibility with the bundles...
>
> I'm not sure how to fix this since we can't skip the the Root CA with
> SSL_CTX_set1_chain. Maybe we could move it from the chain and move it to
> the issuer.
>
>
Hello,
The problem was fixed with the commit bf298af ("BUG/MEDIUM: ssl: fix the
ssl-skip-self-issued-ca option"). Could you check that it works for your
use-case ?
Thanks.
--
William Lallemand
