Changeset 642

Timestamp:

28/07/08 11:10:26 (4 months ago)

Author:

smoku

Message:

Copied note about PEM file cert ordering

Files:

• trunk/etc/c2s.xml.dist.in (modified) (1 diff)

trunk/etc/c2s.xml.dist.in

@@ -91 +91 @@
          private key for client connections. If this is non existant,
          clients will not be offered the STARTTLS stream extension
+         From SSL_CTX_use_certificate_chain_file(3):
+         "The certificates must be in PEM format and must be sorted
+         starting with the subject's certificate (actual client or server
+         certificate), followed by intermediate CA certificates if
+         applicable, and ending at the highest level (root) CA"
+         (the latter one being optional).
 
          verify-mode