[cl-plus-ssl-devel] implementing password callback when reading privatekey files

[Anton Vodonosov]

on Wed Nov 7 21:53:11 UTC 2007 Juhani wrote:

> Hello,
> 
> I made a little modification to cl+ssl to use chained certificates
> with it. My notes of the change and a patch are at
> https://www.juranki.net/ht/hunchentoot-chained-certificate-v3.html.
> 
> It would be great if it could be included to cl+ssl.

Hello, thanks, it's committed.

> The chained certificate is added to global context and new
> sessions inherit it from there. My current assumption is that
> the chained certificate should survive cl+ssl:reload, and I
> modified cl+ssl:initialize accordingly, but I'm not entirely sure
> that this is the correct behaviour.

I decided to keep the global state simpler and have not applied the
cl+ssl::initialize modification.

The new function is named use-certificate-chain-file, to follow
OpenSLL naming of SSL_CTX_use_certificate_chain_file.

Best regards,
- Anton