Fabian Grünbichler df5854986c fix #5248: client: allow self-signed/untrusted certificate chains ...

instead of rejecting any non-leaf certificate not pre-validated by OpenSSL,
treat them as valid but keep track of the fact that the pre-validation result
is no logner trustable.

certificate chains completely trusted by openssl are still accepted like
before, and leaf certificates without a chain are also handled the same (since
the verify callback is only ever called with depth == 0 in that case).

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

2024-03-26 14:29:34 +01:00

..

src

fix #5248: client: allow self-signed/untrusted certificate chains

2024-03-26 14:29:34 +01:00

Cargo.toml

api-types: client: datastore: tools: use proxmox-human-bytes crate

2023-06-26 13:56:45 +02:00