develooper Front page | perl.qpsmtpd | Postings from June 2014

[patch] Expand tls plugin docs concerning certificate chains

From:
Devin Carraway
Date:
June 6, 2014 07:27
Subject:
[patch] Expand tls plugin docs concerning certificate chains
Message ID:
20140606072730.GT27990@atlantic.devin.com
Perhaps counterintuitively, IO::Socket:SSL expects that multi-step SSL
cert chains must have the intermediate certs in the SSL_cert_file
path and not the SSL_ca_file path.  Add documentation on this point,
and a way of verifying cert configuration since most MTAs won't be
at all helpful in diagnosing SSL verification errors.

-- 
Devin  \ aqua(at)devin.com, IRC:Requiem; http://www.devin.com
Carraway \ 4096R/9197B5F9: 9C64 37CD 1B7B 029D 0933  49EA 1E52 7672 9197 B5F9



nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About