allow "chain rsa" and "chain ecc"

Which doesn't change anything about how the chains are parsed,
but it makes the configuration much easier to understand.

It's easier to look at "chain rsa" and go "Oh, it's RSA stuff"
instead of "chain"?  what's that for.

diff --git a/src/lib/tls/conf.c b/src/lib/tls/conf.c
index bf32ed17d1c94a1971a2cc691087d5402ac78a98..baef6e3962b043f53464aa23d0682c0b2106165a 100644 (file)
--- a/src/lib/tls/conf.c
+++ b/src/lib/tls/conf.c
@@ -125,7 +125,7 @@ CONF_PARSER tls_server_config[] = {
 
        { FR_CONF_OFFSET("chain", FR_TYPE_SUBSECTION | FR_TYPE_MULTI, fr_tls_conf_t, chains),
          .subcs_size = sizeof(fr_tls_chain_conf_t), .subcs_type = "fr_tls_chain_conf_t",
-         .subcs = tls_chain_config },
+         .subcs = tls_chain_config .ident2 = CF_IDENT_ANY },
 
        { FR_CONF_DEPRECATED("pem_file_type", FR_TYPE_BOOL, fr_tls_conf_t, NULL) },
        { FR_CONF_DEPRECATED("certificate_file", FR_TYPE_FILE_INPUT, fr_tls_conf_t, NULL) },