Changeset 5080


Ignore:
Timestamp:
Apr 27, 2015 8:05:31 AM (7 years ago)
Author:
riza
Message:

Re #1843: Enable OpenSSL to use legacy certificates(1024 bit root certificate) send by server.
This is supported on OpenSSL 1.0.2. Thanks to Alexander Traud for the patch.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • pjproject/trunk/pjlib/src/pj/ssl_sock_ossl.c

    r5078 r5080  
    689689            } 
    690690    #endif 
     691        } 
     692    } else { 
     693        X509_STORE *pkix_validation_store = SSL_CTX_get_cert_store(ctx); 
     694        if (NULL != pkix_validation_store) { 
     695#if defined(X509_V_FLAG_TRUSTED_FIRST) 
     696            X509_STORE_set_flags(pkix_validation_store,  
     697                                 X509_V_FLAG_TRUSTED_FIRST); 
     698#endif 
     699#if defined(X509_V_FLAG_PARTIAL_CHAIN) 
     700            X509_STORE_set_flags(pkix_validation_store,  
     701                                 X509_V_FLAG_PARTIAL_CHAIN); 
     702#endif 
    691703        } 
    692704    } 
Note: See TracChangeset for help on using the changeset viewer.