Re: [exim-dev] Exim OCSP stapling

Top Page
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-dev
Subject: Re: [exim-dev] Exim OCSP stapling
On 03/02/2013 10:39 PM, Phil Pennock wrote:
> I think that if CAfile or CApath is set, then that should be the only
> trust anchor.


Set where?

If you mean "as fed to SSL_CTX_load_verify_locations() in setup_certs()
then we have that, indirectly and further restricted to the actual chain
above the server's certificate (and not any other root cert we decided to trust).

--
Jeremy