Re: [exim-dev] [Bug 2092] Should support dual-key configurat…

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: Phil Pennock
Data:  
Para: exim-dev
Asunto: Re: [exim-dev] [Bug 2092] Should support dual-key configuration with lists of keys/certs
On 2017-11-02 at 18:00 +0000, Viktor Dukhovni wrote:
> IIRC, the last chain file loaded was used to provide the issuer
> certificates for all the public key types. The work-around is to
> make sure that all the issuer certificates needed by *any* leaf
> cert are present in *each* chain file.


Presumably this is covered under the OpenSSL CHANGES file item in the
list under "Changes between 1.0.1l and 1.0.2 [22 Jan 2015]":

} *) Use algorithm specific chains in SSL_CTX_use_certificate_chain_file():
}    this fixes a limiation in previous versions of OpenSSL.
}    [Steve Henson]


-Phil