Partial certificate chain in PEM causes validation failure in OCSP

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Fixed
    • Priority: Major - P3
    • 5.0.3, 4.4.9, 5.1.0-rc0
    • Affects Version/s: 5.1 Required
    • Component/s: Security
    • None
    • Minor Change
    • ALL
    • v5.0, v4.4
    • Security 2021-07-12, Security 2021-07-26, Security 2021-08-09
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None

      tls section may contain CAFile and certificateKeyFile parameters. When CAFile and certificateKeyFile both contain partial certificate chains, the X509_verify_cert call in OCSPFetcher::fetchAndStaple fails with error 20: "unable to get local issuer certificate"

            Assignee:
            Sergey Galtsev (Inactive)
            Reporter:
            Sergey Galtsev (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: