Mirrors_Framework/mosquitto
1
0
Fork 0
mirror of https://github.com/eclipse-mosquitto/mosquitto.git synced 2026-09-24 00:54:01 +08:00
Code Issues Packages Projects Releases Wiki Activity

Send acceptable CAs when require_certificate is true

Browse Source 
Closes #3403
This commit is contained in:
Roger A. Light
2025-11-25 23:42:28 +00:00
parent 5792e0fe7e
commit a726ff8846
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/net.c
+19
View File
@@ -654,6 +654,11 @@ int net__tls_load_verify(struct mosquitto__listener *listener)
}
}
# else
STACK_OF(X509_NAME) *ca_names = NULL;
if(listener->cafile || listener->capath){
ca_names = sk_X509_NAME_new_null();
}
if(listener->cafile){
rc = SSL_CTX_load_verify_file(listener->ssl_ctx, listener->cafile);
if(rc == 0){
@@ -661,6 +666,15 @@ int net__tls_load_verify(struct mosquitto__listener *listener)
net__print_ssl_error(NULL, NULL);
return MOSQ_ERR_TLS;
}
STACK_OF(X509_NAME) *cert_names = SSL_load_client_CA_file(listener->cafile);
if(cert_names){
for(int i=0; i<sk_X509_NAME_num(cert_names); i++){
sk_X509_NAME_push(ca_names, X509_NAME_dup(sk_X509_NAME_value(cert_names, i)));
}
sk_X509_NAME_free(cert_names);
}
}
if(listener->capath){
rc = SSL_CTX_load_verify_dir(listener->ssl_ctx, listener->capath);
@@ -669,6 +683,11 @@ int net__tls_load_verify(struct mosquitto__listener *listener)
net__print_ssl_error(NULL, NULL);
return MOSQ_ERR_TLS;
}
SSL_add_dir_cert_subjects_to_stack(ca_names, listener->capath);
}
if(ca_names){
SSL_CTX_set_client_CA_list(listener->ssl_ctx, ca_names);
}
# endif