Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make verify depth of client certificates configurable #1243

Open
gebailey opened this issue Apr 27, 2016 · 3 comments
Open

Make verify depth of client certificates configurable #1243

gebailey opened this issue Apr 27, 2016 · 3 comments

Comments

@gebailey
Copy link

Currently, core/ssl.c contains:

                // in the future we should allow to set the verify depth
                SSL_CTX_set_verify_depth(ctx, 1);

Our use case is to have a root CA, an intermediate CA, and end user client certificates, and to properly validate client certificates in this scenario, we need some way to set the verify_depth to 2 or higher.

@gebailey
Copy link
Author

Could this be an optional argument similar to the other arguments provided with --https? i.e.:

...,crt,key[,ciphers,client_ca[,verify_depth]]

@xrmx
Copy link
Collaborator

xrmx commented Apr 27, 2016

Makes sense, feel free to open a pull request.

@gnb
Copy link

gnb commented Sep 7, 2019

@gebailey FYI your feature request should be satisfied with the --ssl-verify-depth option added in this commit which appears in uwsgi 2.0.16.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants