Displaying 1 result from an estimated 1 matches for "ssl_iostream_context_set".
2015 Dec 02
1
[patch] Fix for bug in TLS/SSL for LMTP with chained certificates
..._certificate_chain is called an error is put in the OpenSSL error queue which is never retrieved. Only after loading the server certificate is the queue checked and because of the previously existing error the chain is not loaded. I think the error is related to setting specific protocol options in ssl_iostream_context_set (which may be different for LMTP than for IMAP or POP3) but I did not investigate this.
I made the problem go away by making the following two changes:
1. The ssl_ctx_use_certificate_chain function now empties the OpenSSL error queue before doing its work by calling ERR_get_error() until the queu...