[Bug 216963] net-im/prosody does not find root certificates and ignores capath option

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216963

            Bug ID: 216963
           Summary: net-im/prosody does not find root certificates and
                    ignores capath option
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: lx at FreeBSD.org
          Reporter: freebsd at zilon.de
             Flags: maintainer-feedback?(lx at FreeBSD.org)
          Assignee: lx at FreeBSD.org

Prosody seems to be unable to find the root certificates that are installed by
the ca_root_nss port and consequently connections secure connections to other
servers fail. Also if the capath option (see
https://prosody.im/doc/certificates#specify_trusted_certificate_store) does not
work and seems to be ignored. 

If the cafile option (https://prosody.im/doc/advanced_ssl_config#cafile) is
used instead and pointed to the file, prosody works fine.

The disadvantage of the latter is that the actual file hast to be modified if
additional certificates are added. This wouldn't be necessary if capath would
work and one could simply put additional certificates to that folder.

-- 
You are receiving this mail because:
You are the assignee for the bug.