>Am 07.03.2017 um 15:44 schrieb Matus UHLAR - fantomas:
>> TLSCertificateChainFile is used to provide intermediate certificates.

On 07.03.17 16:08, Christian wrote:
>but where to place the CA file which signed the 'server.crt' ?
>while 'TLSCertificateChainFile' wants to have a 'chain' (at least 2)
>Or can it also be used with a 'single' CA ?

even a single cert can be a chain.

Note that you only need intermediate certificates, not those that are
already bundled with SSL clients (browsers etc).

that means in some cases you don't need the intermediate certificate.

You just have to be sure - browser can have intermediate certificate stored
because it saw it before. In mozilla, "Builtin object token" means bundled
cert, while "Software Security Device" means saved intermediate CA.

I remember having this problem (missing intermediate) on fresh browser
installation and on android phone.


-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Spam = (S)tupid (P)eople's (A)dvertising (M)ethod

------------------------------------------------------------------------------
Announcing the Oxford Dictionaries API! The API offers world-renowned
dictionary content that is easy and intuitive to access. Sign up for an
account today to start using our lexical data to power your apps and
projects. Get started today and enter our developer competition.
http://sdm.link/oxford
_______________________________________________
ProFTPD Developers List
<[email protected]>
https://lists.sourceforge.net/lists/listinfo/proftp-devel

Reply via email to