Commit 323f1950 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

ASN1 files don't work for the *chain_file(), make them use the previous

version
parent c3c392fc
Loading
Loading
Loading
Loading
+13 −1
Original line number Diff line number Diff line
@@ -227,13 +227,25 @@ int cert_stuff(struct connectdata *conn,

    switch(file_type) {
    case SSL_FILETYPE_PEM:
    case SSL_FILETYPE_ASN1:
      /* SSL_CTX_use_certificate_chain_file() only works on PEM files */
      if (SSL_CTX_use_certificate_chain_file(conn->ssl.ctx,
                                             cert_file) != 1) {
        failf(data, "unable to set certificate file (wrong password?)");
        return 0;
      }
      break;

    case SSL_FILETYPE_ASN1:
      /* SSL_CTX_use_certificate_file() works with either PEM or ASN1, but
         we use the case above for PEM so this can only be performed with
         ASN1 files. */
      if (SSL_CTX_use_certificate_file(conn->ssl.ctx,
                                       cert_file,
                                       file_type) != 1) {
        failf(data, "unable to set certificate file (wrong password?)");
        return 0;
      }
      break;
    case SSL_FILETYPE_ENGINE:
      failf(data, "file type ENG for certificate not implemented");
      return 0;