-
-
Notifications
You must be signed in to change notification settings - Fork 11.1k
Closed
Milestone
Description
Regarding certificates of different types, the documentation of SSL_CTX_use_certificate states:
The internal certificate store of OpenSSL can hold several private key/certificate pairs at a time. The certificate used depends on the cipher selected, see also SSL_CTX_set_cipher_list(3).
Please document what happens if several certificates of the same type are loaded successively. My expectation in this case is that the most recently loaded certificate replaces any previously loaded certificate of the same type. This also seems to be the implemented behaviour.
My use case for this is to update certificates while keeping the server running. If, in addition to simply replacing the certificate and possibly the certificate chain, there is anything unusual that should be taken into account regarding SSL_CTX_use_certificate for this use case, please also add it to the documentation. Thank you!
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels