From: Alan T. DeKok <aland@freeradius.org>
Date: Sun, 3 Feb 2019 13:42:32 +0000 (-0500)
Subject: allow "chain rsa" and "chain ecc"
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dbff26d1ecfd87bd4083bea4bc0e8fc91c911044;p=thirdparty%2Ffreeradius-server.git

allow "chain rsa" and "chain ecc"

Which doesn't change anything about how the chains are parsed,
but it makes the configuration much easier to understand.

It's easier to look at "chain rsa" and go "Oh, it's RSA stuff"
instead of "chain"?  what's that for.
---

diff --git a/src/lib/tls/conf.c b/src/lib/tls/conf.c
index bf32ed17d1c..baef6e3962b 100644
--- a/src/lib/tls/conf.c
+++ b/src/lib/tls/conf.c
@@ -125,7 +125,7 @@ CONF_PARSER tls_server_config[] = {
 
 	{ FR_CONF_OFFSET("chain", FR_TYPE_SUBSECTION | FR_TYPE_MULTI, fr_tls_conf_t, chains),
 	  .subcs_size = sizeof(fr_tls_chain_conf_t), .subcs_type = "fr_tls_chain_conf_t",
-	  .subcs = tls_chain_config },
+	  .subcs = tls_chain_config .ident2 = CF_IDENT_ANY },
 
 	{ FR_CONF_DEPRECATED("pem_file_type", FR_TYPE_BOOL, fr_tls_conf_t, NULL) },
 	{ FR_CONF_DEPRECATED("certificate_file", FR_TYPE_FILE_INPUT, fr_tls_conf_t, NULL) },