[erlang-questions] example of partial_chain in SSL

Noah Treuhaft noah@REDACTED
Wed Jun 24 23:05:46 CEST 2015


> And the SSL options are:
>
>                     [{partial_chain, PartialChain},
>                      {cacerts, CaCerts},
>                      {server_name_indication, Host},
>                      {verify_fun, {fun ssl_verify_hostname:verify_fun/3,
>                                    [{check_hostname, Host}]}},
>                      {verify, verify_peer},
>                      {depth, 99}];
>
> What am I doing wrong? I am not sure actually why the function is never
> executed. Any idea is welcome...

Your options don't include `{fail_if_no_peer_cert, true}`, so clients
might be completing the handshake without sending a certificate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20150624/b5dc409d/attachment.htm>


More information about the erlang-questions mailing list