[erlang-questions] example of partial_chain in SSL

Benoit Chesneau bchesneau@REDACTED
Thu Jun 25 09:24:53 CEST 2015


On Thu, Jun 25, 2015 at 6:34 AM Noah Treuhaft <noah@REDACTED> wrote:

> > And the SSL options are:
> >
> >                     [{partial_chain, PartialChain},
> >                      {cacerts, CaCerts},
> >                      {server_name_indication, Host},
> >                      {verify_fun, {fun ssl_verify_hostname:verify_fun/3,
> >                                    [{check_hostname, Host}]}},
> >                      {verify, verify_peer},
> >                      {depth, 99}];
> >
> > What am I doing wrong? I am not sure actually why the function is never
> >
> executed. Any idea is welcome...
>
> Your options don't include `{fail_if_no_peer_cert, true}`, so clients
> might be completing the handshake without sending a certificate.
> _
>

Hrm thanks but adding this option doesn't change anything :/ The
documentation is not really clear about it unfortunately :(

- benoît
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20150625/57a0c106/attachment.htm>


More information about the erlang-questions mailing list