Use cert_path and ca_path arguments in load_cert_chain

Scille · Nov 30, 2018 · 92398fd · 92398fd
1 parent 81c8360
commit 92398fd
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/parsec/backend/app.py b/parsec/backend/app.py
@@ -342,7 +342,10 @@ async def _do_handshake(self, sock):
 
     async def handle_client_with_ssl(self, cert_path, ca_path, stream, swallow_crash=False):
         ssl_context = trio.ssl.create_default_context(trio.ssl.Purpose.CLIENT_AUTH)
-        ssl_context.load_default_certs()
+        if cert_path and ca_path:
+            ssl_context.load_cert_chain(cert_path, ca_path)
+        else:
+            ssl_context.load_default_certs()
         ssl_stream = trio.ssl.SSLStream(stream, ssl_context, server_side=True)
         await self.handle_client(ssl_stream, swallow_crash=swallow_crash)