stream-ssl: Clear CAs for certificate verification before adding new ones.
authorBen Pfaff <blp@nicira.com>
Wed, 15 Jun 2011 18:50:24 +0000 (11:50 -0700)
committerBen Pfaff <blp@nicira.com>
Fri, 17 Jun 2011 17:50:23 +0000 (10:50 -0700)
commite6a8ca62a6ae32285b1c6a668f35159be72199d3
tree52085603431d6cdbb9fe87d4f03a19be66cebbc8
parent7211b387b752ce2c67f1aee639bccc8bd0500c48
stream-ssl: Clear CAs for certificate verification before adding new ones.

If the CA certificate changed and OVS added the new CA certificate, the
change was ineffective.  Clearing the certificate store before adding the
new CA certificate fixes the problem.

I don't know exactly why this fixes the problem, but in my testing it does.

Bug #2921.
Reported-by: Dan Wendlandt <dan@nicira.com>
Reported-by: Pierre Ettori <pettori@nicira.com>
lib/stream-ssl.c