From patchwork Mon Jan 22 08:22:39 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: "Lei, Shaoting" X-Patchwork-Id: 864185 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (mailfrom) smtp.mailfrom=lists.infradead.org (client-ip=65.50.211.133; helo=bombadil.infradead.org; envelope-from=hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org; receiver=) Authentication-Results: ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="cIS+oitj"; dkim-atps=neutral Received: from bombadil.infradead.org (bombadil.infradead.org [65.50.211.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 3zQ4FS5xkJz9s9Y for ; Mon, 22 Jan 2018 19:23:24 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-ID:Date:Subject:To :From:Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References: List-Owner; bh=IT9oR8amrNqSldl82dPQrtQe1V3cj296UW8C64Xwxm0=; b=cIS+oitj5pfZIo UVCsMkYXrST93IxxqiLvdQEYLhVMK4IkoVFNmEAj39u0zllvYfsQxGccFnygx7qeQmSsfVYSYB68S N6RHlZMPPDTrDnGg4yY6c0B42YtJjvngCou2ixZFF59zlAkjq6rg0ZeztuCtdjyMszgHlU3KGu5Ue h4I1E0e4q1EE9znt/9udUJJaVYANrvSIWRZ+Pmr1BfdRYPm5y7vTI1oWReY0fZYsn3IWvaAHikvmu UIivlEzngXjdKUXsRD2506nOMWAJv/VnbKh9gBoqRPNSBCuTdFE9oPVdjElzmvC2Y9Rb4Nlw93wGV Hg3f9sY4ey+kFAYLnYVQ==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.89 #1 (Red Hat Linux)) id 1edXNe-0007kT-OI; Mon, 22 Jan 2018 08:23:02 +0000 Received: from mail.cn.fujitsu.com ([183.91.158.132] helo=heian.cn.fujitsu.com) by bombadil.infradead.org with esmtp (Exim 4.89 #1 (Red Hat Linux)) id 1edXNS-0007TK-R5 for hostap@lists.infradead.org; Mon, 22 Jan 2018 08:22:54 +0000 X-IronPort-AV: E=Sophos;i="5.43,368,1503331200"; d="scan'208";a="35623170" Received: from bogon (HELO cn.fujitsu.com) ([10.167.33.5]) by heian.cn.fujitsu.com with ESMTP; 22 Jan 2018 16:22:39 +0800 Received: from G08CNEXCHPEKD02.g08.fujitsu.local (unknown [10.167.33.83]) by cn.fujitsu.com (Postfix) with ESMTP id D708349F19A3 for ; Mon, 22 Jan 2018 16:22:37 +0800 (CST) Received: from G08CNEXMBPEKD01.g08.fujitsu.local ([10.167.33.81]) by G08CNEXCHPEKD02.g08.fujitsu.local ([10.167.33.83]) with mapi id 14.03.0361.001; Mon, 22 Jan 2018 16:22:39 +0800 From: "Lei, Shaoting" To: "hostap@lists.infradead.org" Subject: one issue about the test wbesit Thread-Topic: one issue about the test wbesit Thread-Index: AdOTWid2chyIxTkgQ065eVkD9OnXuA== Date: Mon, 22 Jan 2018 08:22:39 +0000 Message-ID: <9A231BE5D02F5B4683229C96D4C5BF6601674926DE@G08CNEXMBPEKD01.g08.fujitsu.local> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.130.24 dlp-reaction: no-action x-originating-ip: [10.167.216.90] MIME-Version: 1.0 X-yoursite-MailScanner-ID: D708349F19A3.A8326 X-yoursite-MailScanner: Found to be clean X-yoursite-MailScanner-From: leist.fnst@cn.fujitsu.com X-Spam-Status: No X-Spam-Note: CRM114 invocation failed X-Spam-Score: -1.9 (-) X-Spam-Report: SpamAssassin version 3.4.1 on bombadil.infradead.org summary: Content analysis details: (-1.9 points) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-BeenThere: hostap@lists.infradead.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Hostap" Errors-To: hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org Below website was broken for several days. Is anybody to fix it? http://buildbot.w1.fi/hwsim/tests.php -----邮件原件----- 发件人: Hostap [mailto:hostap-bounces@lists.infradead.org] 代表 hostap-request@lists.infradead.org 发送时间: 2018年1月22日 4:00 收件人: hostap@lists.infradead.org 主题: Hostap Digest, Vol 28, Issue 17 Send Hostap mailing list submissions to hostap@lists.infradead.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.infradead.org/mailman/listinfo/hostap or, via email, send a message with subject or body 'help' to hostap-request@lists.infradead.org You can reach the person managing the list at hostap-owner@lists.infradead.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Hostap digest..." Today's Topics: 1. [PATCH] TLS: Load chain certificates from client_cert file (Isaac Boukris) ---------------------------------------------------------------------- Message: 1 Date: Sun, 21 Jan 2018 01:36:44 +0000 From: Isaac Boukris To: hostap@lists.infradead.org Cc: Isaac Boukris Subject: [PATCH] TLS: Load chain certificates from client_cert file Message-ID: <1516498604-20963-1-git-send-email-iboukris@gmail.com> This helps the server to build the chain to trusted CA. Signed-off-by: Isaac Boukris --- src/crypto/tls_openssl.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) -- 2.1.0 ------------------------------ Subject: Digest Footer _______________________________________________ Hostap mailing list Hostap@lists.infradead.org http://lists.infradead.org/mailman/listinfo/hostap ------------------------------ End of Hostap Digest, Vol 28, Issue 17 ************************************** diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c index ce73848..3d789bb 100644 --- a/src/crypto/tls_openssl.c +++ b/src/crypto/tls_openssl.c @@ -2653,10 +2653,9 @@ static int tls_connection_client_cert(struct tls_connection *conn, return 0; } - if (SSL_use_certificate_file(conn->ssl, client_cert, - SSL_FILETYPE_PEM) == 1) { + if (SSL_use_certificate_chain_file(conn->ssl, client_cert) == 1) { ERR_clear_error(); - wpa_printf(MSG_DEBUG, "OpenSSL: SSL_use_certificate_file (PEM)" + wpa_printf(MSG_DEBUG, "OpenSSL: SSL_use_certificate_chain_file" " --> OK"); return 0; }