Skip to content

Documentation of SSL_CTX_use_certificate to replace a certificate #2147

@triska

Description

@triska

Regarding certificates of different types, the documentation of SSL_CTX_use_certificate states:

  The internal certificate store of OpenSSL can hold several private
  key/certificate pairs at a time. The certificate used depends on the
  cipher selected, see also SSL_CTX_set_cipher_list(3).

Please document what happens if several certificates of the same type are loaded successively. My expectation in this case is that the most recently loaded certificate replaces any previously loaded certificate of the same type. This also seems to be the implemented behaviour.

My use case for this is to update certificates while keeping the server running. If, in addition to simply replacing the certificate and possibly the certificate chain, there is anything unusual that should be taken into account regarding SSL_CTX_use_certificate for this use case, please also add it to the documentation. Thank you!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions