[ 
https://issues.apache.org/jira/browse/TS-2649?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14056949#comment-14056949
 ] 

ASF subversion and git services commented on TS-2649:
-----------------------------------------------------

Commit 06f5b3f8a5a85e2e7e3f0e5cf910e944ea87842e in trafficserver's branch 
refs/heads/master from [~jpe...@apache.org]
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=06f5b3f ]

TS-2649: use certificate chain loading everywhere

Use SSL_CTX_use_certificate_chain_file() everywhere we load a SSL
certificate. This lets the operator use a certificate chain in a
single file for both the SSL client and server.


> add certificate chain loading to SSL client
> -------------------------------------------
>
>                 Key: TS-2649
>                 URL: https://issues.apache.org/jira/browse/TS-2649
>             Project: Traffic Server
>          Issue Type: New Feature
>          Components: SSL
>    Affects Versions: 5.0.0
>            Reporter: James Peach
>            Assignee: James Peach
>             Fix For: 5.1.0
>
>
> The SSL client has no way to load a chain file, so sending a SSL client 
> certificate invariably fails. It works when we use 
> {{SSL_CTX_use_certificate_chain_file}} to load the certificate, and that 
> seems to be current best practice with OpenSSL.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to