Page MenuHomePhabricator

Support "ssl.chain" in Aphlict configuration
ClosedPublic

Authored by epriestley on Apr 14 2016, 12:51 PM.
Tags
None
Referenced Files
F18905264: D15709.id.diff
Nov 8 2025, 1:32 PM
F18892165: D15709.diff
Nov 7 2025, 11:26 AM
F18816536: D15709.id37858.diff
Oct 21 2025, 7:31 AM
F18771537: D15709.diff
Oct 8 2025, 8:15 PM
F18770648: D15709.id.diff
Oct 8 2025, 1:59 PM
F18765556: D15709.diff
Oct 7 2025, 11:51 AM
F18624877: D15709.id37858.diff
Sep 15 2025, 9:19 PM
F18616315: D15709.id37850.diff
Sep 14 2025, 5:06 PM
Subscribers
None

Details

Summary

Fixes T10806. Although browsers don't seem to care about this, it's more correct to support it, and the new test console uses normal cURL and does care.

Test Plan
  • Hit the error case for providing a chain but no key/cert.
  • Used openssl s_client -connect localhost:22280 to connect to local Aphlict servers.
  • With SSL but no chain, saw openssl fail to verify the remote.
  • With SSL and a chain, saw openssl verify the identify of the remote.

Diff Detail

Repository
rP Phabricator
Branch
aphlict9
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 11719
Build 14678: Run Core Tests
Build 14677: arc lint + arc unit