diff options
| author | sthen <> | 2017-01-01 15:15:36 +0000 |
|---|---|---|
| committer | sthen <> | 2017-01-01 15:15:36 +0000 |
| commit | b925ef0f1039e465222b02e6d36a41504fab2065 (patch) | |
| tree | b93bb35b664837834325b6c725f941074b6d2c00 /src/lib/libtls/tls.c | |
| parent | a8b45803d3fb6170b4567bc459cc88846d7d09ee (diff) | |
| download | openbsd-b925ef0f1039e465222b02e6d36a41504fab2065.tar.gz openbsd-b925ef0f1039e465222b02e6d36a41504fab2065.tar.bz2 openbsd-b925ef0f1039e465222b02e6d36a41504fab2065.zip | |
Various work on cert.pem, ok bcook@
- print/sort using the full certificate subject rather than a pretty-printed
subset (as done in the current version of format-pem.pl); previously this was
resulting in a problem where a CN conflict resulted in the GlobalSign R2 CA
accidentally getting dropped in r1.10; problem found by Steven McDonald
- remove CA certificates that are no longer present in the CA store of the
release branch of Mozilla - possible now that libressl has support for
alternate chains (libcrypto/x509/x509_vfy.c r1.52)
- add new CA certificates from Mozilla's store from those organisations
which we already list
Diffstat (limited to 'src/lib/libtls/tls.c')
0 files changed, 0 insertions, 0 deletions