]> git.ipfire.org Git - thirdparty/haproxy.git/commit
Revert "MINOR: ssl: rework add cert chain to CTX to be libssl independent"
authorWilliam Lallemand <wlallemand@haproxy.com>
Tue, 2 Jun 2020 16:27:20 +0000 (18:27 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Tue, 2 Jun 2020 16:37:42 +0000 (18:37 +0200)
commitf187ce68b1c0f5d2ba8434657ddd34dabf3f7ef3
tree00b4a1e72adc973d0c2429bd1eb436baca3353db
parent39bd740d005fbe03a29a56851576b5e16a9b62f9
Revert "MINOR: ssl: rework add cert chain to CTX to be libssl independent"

This reverts commit 4fed93eb725b513dd3b2029daa888311db110851.

This commit was simplifying the certificate chain loading with
SSL_CTX_add_extra_chain_cert() which is available in all SSL libraries.
Unfortunately this function is not compatible with the
multi-certificates bundles, which have the effect of concatenating the
chains of all certificate types instead of creating a chain for each
type (RSA, ECDSA etc.)

Should fix issue #655.
src/ssl_sock.c