From d0ef2b563d4291f81a8f9ed7cd02bdfbaa8cc5f4 Mon Sep 17 00:00:00 2001 From: reyk <> Date: Thu, 22 Jan 2015 09:12:57 +0000 Subject: Support CA verification in chroot'ed processes without direct file access to the certificates. SSL_CTX_load_verify_mem() is a frontend to the new X509_STORE_load_mem() function that allows to load the CA chain from a memory buffer that is holding the PEM-encoded files. This function allows to handle the verification in privsep'ed code. Adopted for LibreSSL based on older code from relayd (by pyr@ and myself) With feedback and OK bluhm@ --- src/lib/libssl/ssl/shlib_version | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/libssl/ssl/shlib_version') diff --git a/src/lib/libssl/ssl/shlib_version b/src/lib/libssl/ssl/shlib_version index 079346fa7b..10f084cda1 100644 --- a/src/lib/libssl/ssl/shlib_version +++ b/src/lib/libssl/ssl/shlib_version @@ -1,2 +1,2 @@ major=30 -minor=0 +minor=1 -- cgit v1.2.3-55-g6feb