Emeric Brun 81c00f0a7a MINOR: ssl: add ignore verify errors options ...

Allow to ignore some verify errors and to let them pass the handshake.

Add option 'crt-ignore-err <list>'
Ignore verify errors at depth == 0 (client certificate)
<list> is string 'all' or a comma separated list of verify error IDs
(see http://www.openssl.org/docs/apps/verify.html)

Add option 'ca-ignore-err <list>'
Same as 'crt-ignore-err' for all depths > 0 (CA chain certs)

Ex ignore all errors on CA and expired or not-yet-valid errors
on client certificate:

bind 0.0.0.0:443 ssl crt crt.pem verify required
 cafile ca.pem ca-ignore-err all crt-ignore-err 10,9

2012-10-02 08:32:50 +02:00

..

common

MINOR: config: make str2listener() use memprintf() to report errors.

2012-09-24 10:53:16 +02:00

import

[MAJOR] replace ultree with ebtree in wait-queues

2008-06-24 08:17:16 +02:00

proto

MINOR: connection: add a pointer to the connection owner

2012-09-28 00:01:22 +02:00

types

MINOR: ssl: add ignore verify errors options

2012-10-02 08:32:50 +02:00