Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
[patch] Expand tls plugin docs concerning certificate chains
0 views
Skip to first unread message
Devin Carraway
Jun 6, 2014, 3:27:30 AM6/6/14
to qps...@perl.org
Perhaps counterintuitively, IO::Socket:SSL expects that multi-step SSL
cert chains must have the intermediate certs in the SSL_cert_file
path and not the SSL_ca_file path. Add documentation on this point,
and a way of verifying cert configuration since most MTAs won't be
at all helpful in diagnosing SSL verification errors.
--
Devin \ aqua(at)devin.com, IRC:Requiem; http://www.devin.com
Carraway \ 4096R/9197B5F9: 9C64 37CD 1B7B 029D 0933 49EA 1E52 7672 9197 B5F9
cert chains must have the intermediate certs in the SSL_cert_file
path and not the SSL_ca_file path. Add documentation on this point,
and a way of verifying cert configuration since most MTAs won't be
at all helpful in diagnosing SSL verification errors.
--
Devin \ aqua(at)devin.com, IRC:Requiem; http://www.devin.com
Carraway \ 4096R/9197B5F9: 9C64 37CD 1B7B 029D 0933 49EA 1E52 7672 9197 B5F9
0 new messages