git://git.onelab.eu / sliver-openvswitch.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ccf1646) | patch
stream-ssl: Clear CAs for certificate verification before adding new ones.
authorBen Pfaff <blp@nicira.com>
Wed, 15 Jun 2011 18:50:24 +0000 (11:50 -0700)
committerBen Pfaff <blp@nicira.com>
Thu, 28 Jul 2011 18:21:58 +0000 (11:21 -0700)
commit9df30404d9f806daa6f9851412b2a295f3540e75
treeee8dbcebcf3ebca1d034ae6f6b920fc13f7dfa1ftree | snapshot
parentccf16467108326ba35686f549534f254db02b113commit | diff
stream-ssl: Clear CAs for certificate verification before adding new ones.

If the CA certificate changed and OVS added the new CA certificate, the
change was ineffective.  Clearing the certificate store before adding the
new CA certificate fixes the problem.

I don't know exactly why this fixes the problem, but in my testing it does.

Bug #2921.
Reported-by: Dan Wendlandt <dan@nicira.com>
Reported-by: Pierre Ettori <pettori@nicira.com>
lib/stream-ssl.c diff | blob | history
sliver-openvswitch