CVSROOT: /cvs Module name: src Changes by: r...@cvs.openbsd.org 2009/04/02 08:30:51
Modified files: usr.sbin/relayd: parse.y relay.c relayd.conf.5 relayd.h ssl_privsep.c Log message: add support to specify a ca file (eg. /etc/ssl/cert.pem) to verify ssl server certificates when connecting as an SSL client from relays. it works so far, but needs more testing and is currently lacking support for certificate revocation (like CRL or OCSP). the file ssl_privsep.c is extended to implement more code that should be in openssl to allow loading the ca from chroot...