generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add certificate callback. If set this is called whenever a certificate

Browse Source 
is required by client or server. An application can decide which
certificate chain to present based on arbitrary criteria: for example
supported signature algorithms. Add very simple example to s_server.
This fixes many of the problems and restrictions of the existing client
certificate callback: for example you can now clear existing certificates
and specify the whole chain.
(backport from HEAD)
This commit is contained in:
Dr. Stephen Henson
2012-12-26 14:43:51 +00:00
parent bd9fc1d667
commit 623a5e24cb
13 changed files with 329 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ssl/ssl_err.c
View File

@@ -357,6 +357,7 @@ static ERR_STRING_DATA SSL_str_reasons[]=
{ERR_REASON(SSL_R_CA_DN_TOO_LONG) ,"ca dn too long"},
{ERR_REASON(SSL_R_CCS_RECEIVED_EARLY) ,"ccs received early"},
{ERR_REASON(SSL_R_CERTIFICATE_VERIFY_FAILED),"certificate verify failed"},
{ERR_REASON(SSL_R_CERT_CB_ERROR) ,"cert cb error"},
{ERR_REASON(SSL_R_CERT_LENGTH_MISMATCH) ,"cert length mismatch"},
{ERR_REASON(SSL_R_CHALLENGE_IS_DIFFERENT),"challenge is different"},
{ERR_REASON(SSL_R_CIPHER_CODE_WRONG_LENGTH),"cipher code wrong length"},