Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-2716

ssl_server_ca_chain and ssl_client_ca_chain are dead settings

    XMLWordPrintable

Details

    Description

      The ssl_server_ca_chain setting is used in webrick to add intermediate root certificates (chain) to the SSL context. When the ssl server sends its Server Certificate message, it includes the chain of certs so that clients can validate the connection.

      For example, :localcacerts might contain the cert for C=US/O=GeoTrust Inc./CN=GeoTrust Global CA

      and :ssl_server_ca_chain might contain the cert for /C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G2.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              josh Josh Cooper
              Narmadha Perumal Narmadha Perumal
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support