New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[passhport-admin] + [passhport] Misleading SSL directives in config file #367

Closed

Raphux opened this issue Feb 12, 2019 · 0 comments

Assignees

Labels

Contributor

Raphux commented Feb 12, 2019 •

edited

In both configuration files (passhport.ini and passhport-admin.ini), in the SSL section, there are 2 things to enhance :

the SSL_CERTIFICAT directive should be rename to SSL_CERTIFICAT_CHAIN, because the purpose of this directive is to provide passhport and passhport-admin a way to verify that the certificat proposed by passhportd API is signed by the "PKI" whose certs are concatenated in a file pointed by this directive.
the SSL_KEY should be removed. There is no need to have a private key to verify a certificat.

Raphux added the New label

Raphux assigned elg

Raphux added enhancement Important labels

elg removed the Important label

elg removed the New label

elg added a commit to elg/passhport that referenced this issue


          Issue LibrIT#367

f8ab629

elg closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment