Re: [ovs-dev] [PATCH 2/2 v2] stream-ssl: Get peer-ca-cert functionality to work.

2015-09-18 Thread Ben Pfaff
On Fri, Sep 11, 2015 at 09:32:56AM -0700, Gurucharan Shetty wrote: > When --certificate option is provided, we currently use > SSL_CTX_use_certificate_chain_file() function to add > that certificate. If our single certificate file had multiple > certificates (as a chain), all of them would get adde

[ovs-dev] [PATCH 2/2 v2] stream-ssl: Get peer-ca-cert functionality to work.

2015-09-11 Thread Gurucharan Shetty
When --certificate option is provided, we currently use SSL_CTX_use_certificate_chain_file() function to add that certificate. If our single certificate file had multiple certificates (as a chain), all of them would get added and sent to the remote peer. But once you call SSL_CTX_use_certificate_ch