V4.2.1, SSL CA Path issue

[Bill Chen]

Sorry again. I didn't use the hash format in the directory. It works fine when I did.

Thanks. And sorry for the inconvenience.


?Best Regards,
-----------------------------------
Bill Chen
EMAIL: bill.chen at ecitele.com
TEL: 8152
MOBILE: 13606506984
-----------------------------------


________________________________
From: Bill Chen
Sent: Friday, December 4, 2015 10:54 PM
To: omniorb-list at omniorb-support.com
Subject: RE: V4.2.1, SSL CA Path issue


Sorry, one correction: the line I added to the eg2_impl.cc was :

//I added this line

  sslContext::certificate_authority_path = "/home/foo/trustedca";



it doesn't work.



Best Regards,

Bill Chen

From: Bill Chen
Sent: 2015?12?4? 22:50
To: 'omniorb-list at omniorb-support.com'
Subject: V4.2.1, SSL CA Path issue



Hello everyone,

  omniORB V4.2.1 introduces a very important feature for SSL: a new attribute named certificate_authority_path in sslContext.h. It's designed to put all trusted certificates in the folder.

  When I tested this feature, I found the certificates in this folder just didn't work. What I did was to add a new line in examples/ssl_echo/eg2_impl.cc like the following, and put one certificate (in pem format) to the "/home/foo/trustedca" folder:



//...

int main(int argc, char** argv)

{

  sslContext::certificate_authority_file = "root.pem";



//I added this line

  sslContext::certificate_authority_path = "/home/foo/trustedca";



  sslContext::key_file = "server.pem";

  sslContext::key_file_password = "password";

//...





  If I move the certificate to the root.pem file, it works fine.

  Did I do anything wrong? Thanks.



Best Regards,

Bill Chen


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.omniorb-support.com/pipermail/omniorb-list/attachments/20151206/d621cdee/attachment.html>