Hi folks,

before opening a bug report I'll ask here because I want to make sure that I
have not missed something.

With the upgrade to 6.8 my cert validation seems to be broken because the
hashed certs in /etc/ssl/certs are not honored anymore. I usually stored our
L1 and L2 ca certs in /etc/ssl/certs and hashed them with "openssl certhash".
That worked for all my machines until 6.7 but broke with 6.8. Adding the ca
certs to /etc/ssl/cert.pem works.

Did I miss something? I guess something changed during k2k20 in "certificate
chain validation in libcrypto"?

Thanks and with kind regards.

Uwe

Reply via email to