commit | b90d2cbc4248a760493e3ce8a68ace5cdca8d97e | [log] [tgz] |
---|---|---|
author | Emmanuel Hocdet <manu@gandi.net> | Tue Feb 18 15:27:32 2020 +0100 |
committer | William Lallemand <wlallemand@haproxy.org> | Wed Feb 26 13:06:04 2020 +0100 |
tree | 4f18e70b1785a07802bfa6478ba76fbd0879e367 | |
parent | 75a7aa13da80959970c5b558c0c6beb473dbddd5 [diff] |
MINOR: ssl: resolve issuers chain later The goal is to use the ckch to store data from a loaded PEM file or a <payload> and only for that. This patch addresses the ckch->chain case. Looking for the issuers chain, if no chain is present in the ckch, can be done in ssl_sock_put_ckch_into_ctx(). This way it is possible to know the origin of the certificate chain without an extra state.