OpenBSD / src / 4t3chXA / Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains.

OpenBSD/src 4t3chXA — lib/libssl ssl_both.c ssl_srvr.c

2019-03-25 16:35:48 UTC by jsing on ⎇

HEAD

🏷

OPENBSD_6_6_BASE
OPENBSD_6_5_BASE

   Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains.

   We will now include the certificates in the chain in the certificate list,
   or use the existing extra_certs if present. Failing that we fall back to
   the automatic chain building if not disabled.

   This also simplifies the code significantly.

   ok beck@ tb@

Version	Delta		File
1.15	+28	-32	lib/libssl/ssl_both.c
1.65	+4	-4	lib/libssl/ssl_srvr.c
1.59	+2	-2	lib/libssl/ssl_clnt.c
1.240	+2	-2	lib/libssl/ssl_locl.h
	+36	-40	4 files

Unified Split Raw