Re: incoming TLS sessions failures

[Eugene Crosser <crosser@rol.ru>]

On Wed, 2003-03-26 at 11:58, Matti Aarnio wrote:
> On Wed, Mar 26, 2003 at 11:15:52AM +0300, Eugene Crosser wrote:
> > I am experiencing problems with incming TLS sessions, apparently only
> > with sessions that originate from universities in Germany.
> 
> Hmm...
> 
> Reading the code, the most illogical answer is:
> 
>     PARAM tls-ccert-vd      99
> 
> I do suspect that the code has test of   (verify_depth >= depth)  the
> wrong way around.  It should, possibly, be:  (depth >= verify_depth)

Maybe this is even logical, if interpreted as:
"allow depth of up to NN".
Anyway, your advice seems to help.

Thanks
Eugene


-
To unsubscribe from this list: send the line "unsubscribe zmailer" in
the body of a message to majordomo@nic.funet.fi