mirror of https://github.com/caddyserver/caddy.git
b814c0af9c
When client certificate is enabled Caddy check only last certificate from request. When this cert is not in list of trusted leaf certificates, connection is rejected. According to RFC TLS1.x the sender's certificate must come first in the list. Each following certificate must directly certify the one preceding it. This patch fix this problem - first certificate is checked instead of last. |
||
|---|---|---|
| .. | ||
| distributedstek | ||
| standardstek | ||
| acmeissuer.go | ||
| automation.go | ||
| certselection.go | ||
| connpolicy.go | ||
| dnssolver.go | ||
| fileloader.go | ||
| folderloader.go | ||
| internalissuer.go | ||
| matchers.go | ||
| matchers_test.go | ||
| pemloader.go | ||
| sessiontickets.go | ||
| tls.go | ||
| values.go | ||