Displaying 2 results from an estimated 2 matches for "ssl_client_ctx".
Did you mean:
ssl_client_ca_
2015 Feb 11
2
[PATCH] Fix for client certificate validation does not work
...es);
+ ssl_proxy_ctx_verify_client(ctx->ctx);
hash_table_insert(ssl_servers, ctx, ctx);
return ctx;
@@ -1343,12 +1310,10 @@
ssl_proxy_init_client(const struct login_settings *login_set,
const struct master_service_ssl_settings *ssl_set)
{
- STACK_OF(X509_NAME) *xnames;
-
if ((ssl_client_ctx = SSL_CTX_new(SSLv23_client_method())) == NULL)
i_fatal("SSL_CTX_new() failed");
- xnames = ssl_proxy_ctx_init(ssl_client_ctx, ssl_set, TRUE);
- ssl_proxy_ctx_verify_client(ssl_client_ctx, xnames);
+ ssl_proxy_ctx_init(ssl_client_ctx, ssl_set);
+ ssl_proxy_ctx_verify_client(ssl_client_...
2011 Dec 22
1
proxying, SSL, and client certificate
...on server2.example.com has:
ssl_verify_client_cert = yes
auth_ssl_require_client_cert = yes
then when a client connects to server1 and authenticates, a connection is established to server2 but the SSL handshake fails because server1 doesn't present a client certificate. I don't see where ssl_client_ctx is tied to a client certificate in ssl-proxy-openssl.c.
Thanks.