diff options
Diffstat (limited to 'include')
| -rw-r--r-- | include/ssl_key_handler.hpp | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/include/ssl_key_handler.hpp b/include/ssl_key_handler.hpp index d634d63..2bd1f59 100644 --- a/include/ssl_key_handler.hpp +++ b/include/ssl_key_handler.hpp @@ -16,6 +16,7 @@ namespace ensuressl { +constexpr char const *trustStorePath = "/etc/ssl/certs/authority"; static void initOpenssl(); static EVP_PKEY *createEcKey(); @@ -312,7 +313,11 @@ inline std::shared_ptr<boost::asio::ssl::context> boost::asio::ssl::context::no_tlsv1 | boost::asio::ssl::context::no_tlsv1_1); - // m_ssl_context.set_verify_mode(boost::asio::ssl::verify_peer); + mSslContext->set_verify_mode(boost::asio::ssl::verify_peer); + + BMCWEB_LOG_DEBUG << "Using default TrustStore location: " << trustStorePath; + mSslContext->add_verify_path(trustStorePath); + mSslContext->use_certificate_file(ssl_pem_file, boost::asio::ssl::context::pem); mSslContext->use_private_key_file(ssl_pem_file, |
