Re: [PATCH] crypto: allow client/server cert chains

2023-02-23 Thread matoro via
On 2023-02-20 10:44, Daniel P. Berrangé wrote: On Mon, Feb 13, 2023 at 01:00:49PM -0500, matoro_mailinglist_qemu--- via wrote: From: matoro The existing implementation assumes that client/server certificates are single individual certificates. If using publicly-issued certificates, or inter

Re: [PATCH] crypto: allow client/server cert chains

2023-02-20 Thread Daniel P . Berrangé
On Mon, Feb 13, 2023 at 01:00:49PM -0500, matoro_mailinglist_qemu--- via wrote: > From: matoro > > The existing implementation assumes that client/server certificates are > single individual certificates. If using publicly-issued certificates, > or internal CAs that use an intermediate issuer, t

[PATCH] crypto: allow client/server cert chains

2023-02-13 Thread matoro_mailinglist_qemu--- via
From: matoro The existing implementation assumes that client/server certificates are single individual certificates. If using publicly-issued certificates, or internal CAs that use an intermediate issuer, this is unlikely to be the case, and they will instead be certificate chains. While this c