zen icon indicating copy to clipboard operation
zen copied to clipboard

ValidateCertificate should be able to validate certificate chain

Open asbachb opened this issue 6 years ago • 1 comments

I guess zend should be able to verify the certification chain like every other ssl enabled service (httpd, imaps, ...)

Adding the intermediate certificate like described in step 3,4 (https://zencash.atlassian.net/wiki/spaces/ZEN/pages/7537014/Part+6+-+Procure+and+Configure+Certificate) should not be necessary if ValidateCertificate (https://github.com/ZencashOfficial/zen/blob/48bba6a7b46f428b75f4cd925ff91d1f1fd462b2/src/zen/utiltls.cpp#L417) would behave correctly.

A problem which might help with that issue is that zend is currently not providing the entire certificate chain during handshake. see https://github.com/asbachb/zen/blob/master/src/zen/tlsmanager.cpp#L183

asbachb avatar Jul 26 '18 02:07 asbachb

Also see https://github.com/ZencashOfficial/zen/issues/85 and https://github.com/ZencashOfficial/zen/issues/85

tarrenj avatar Jul 30 '18 16:07 tarrenj