diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-12-26 15:21:53 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-12-26 15:21:53 +0000 |
| commit | b762acadeb09618a63140e30fb385ea106730635 (patch) | |
| tree | 8a22cd4ed3d9a467a6bbdd8ab88ee20e995f41cf /apps/s_apps.h | |
| parent | 7d779eefb43309319818090c27778bd3f904748e (diff) | |
Add support for certificate stores in CERT structure. This makes it
possible to have different stores per SSL structure or one store in
the parent SSL_CTX. Include distint stores for certificate chain
verification and chain building. New ctrl SSL_CTRL_BUILD_CERT_CHAIN
to build and store a certificate chain in CERT structure: returing
an error if the chain cannot be built: this will allow applications
to test if a chain is correctly configured.
Note: if the CERT based stores are not set then the parent SSL_CTX
store is used to retain compatibility with existing behaviour.
(backport from HEAD)
Diffstat (limited to 'apps/s_apps.h')
| -rw-r--r-- | apps/s_apps.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/s_apps.h b/apps/s_apps.h index c04e2d3611..c7e6926a27 100644 --- a/apps/s_apps.h +++ b/apps/s_apps.h @@ -155,7 +155,7 @@ int MS_CALLBACK verify_callback(int ok, X509_STORE_CTX *ctx); #ifdef HEADER_SSL_H int set_cert_stuff(SSL_CTX *ctx, char *cert_file, char *key_file); int set_cert_key_stuff(SSL_CTX *ctx, X509 *cert, EVP_PKEY *key, - STACK_OF(X509) *chain); + STACK_OF(X509) *chain, int build_chain); # ifndef OPENSSL_NO_TLSEXT int set_cert_key_and_authz(SSL_CTX *ctx, X509 *cert, EVP_PKEY *key, unsigned char *authz, size_t authz_length); |