Commits on Aug 9, 2023

1. authorize: allow client certificate intermediates …

   Update the isValidClientCertificate() method to consider any
   client-supplied intermediate certificates. Previously, in order to trust
   client certificates issued by an intermediate CA, users would need to
   include that intermediate CA's certificate directly in the client_ca
   setting. After this change, only the trusted root CA needs to be set: as
   long as the client can supply a set of certificates that chain back to
   this trusted root, the client's certificate will validate successfully.
   
   Rework the previous CRL checking logic to now consider CRLs for all
   issuers in the verified chains.

   

   kenjenkins committed Aug 9, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for ae8b639
   • Browse repository at this point

   Copy the full SHA

   ae8b639 View commit details

   Browse the repository at this point in the history