-
Notifications
You must be signed in to change notification settings - Fork 165
Open
Labels
plumbingInfra stuff that's important to have but it's not that exciting to work on.Infra stuff that's important to have but it's not that exciting to work on.
Description
There is a configuration field tls_certificate which can be configured to point to a PEM file, which does appear to in fact accept certificate chains, but it appears the entire chain but the certificate itself is discarded. The result of this is validation of a certificate not signed directly by a CA will always fail.
The code in build_acceptor seems to likely be where the additional certs are being discarded, and could probably be adapted with no additional changes to make TLS work correctly.
I am not aware of any way to work around this or anything I may have misconfigured.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
plumbingInfra stuff that's important to have but it's not that exciting to work on.Infra stuff that's important to have but it's not that exciting to work on.