www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-08-08 15:02:10 +03:00
Code Activity

* modules/ssl/ssl_engine_init.c (ssl_init_proxy_certs): Update comment,

Browse Source 
thanks to kbrand.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1375445 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Joe Orton
2012-08-21 09:30:01 +00:00
parent cc786585b6
commit 7f27e021d1
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
modules/ssl/ssl_engine_init.c
View File

@@ -1410,7 +1410,11 @@ static void ssl_init_proxy_certs(server_rec *s,
return;
}
/* Load all of the CA certs and construct a chain */
/* If SSLProxyMachineCertificateChainFile is configured, load all
* the CA certs and have OpenSSL attempt to construct a full chain
* from each configured end-entity cert up to a root. This will
* allow selection of the correct cert given a list of root CA
* names in the certificate request from the server. */
pkp->ca_certs = (STACK_OF(X509) **) apr_pcalloc(p, ncerts * sizeof(sk));
sctx = X509_STORE_CTX_new();
@@ -1421,8 +1425,6 @@ static void ssl_init_proxy_certs(server_rec *s,
ssl_die(s);
}
/* ### Why is all the following done? Why is it necessary or
* useful for the server to try to verify its own client cert? */
X509_STORE_load_locations(store, pkp->ca_cert_file, NULL);
for (n = 0; n < ncerts; n++) {