From d4e4f599f052b2639ebd111330657294dff1c146 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?P=C5=99emysl=20Janouch?= Date: Wed, 13 Aug 2014 19:23:09 +0200 Subject: [PATCH] ZyklonB: make client certificates actually work We forgot to set the private key, which can reside in the same file as the certificate, appended at the end. --- zyklonb.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/zyklonb.c b/zyklonb.c index 10df9b0..47533f0 100644 --- a/zyklonb.c +++ b/zyklonb.c @@ -282,7 +282,8 @@ irc_initialize_ssl (struct bot_context *ctx, struct error **e) if (!path) print_error ("%s: %s", "cannot open file", ssl_cert); // XXX: perhaps we should read the file ourselves for better messages - else if (!SSL_use_certificate_file (ctx->ssl, path, SSL_FILETYPE_PEM)) + else if (!SSL_use_certificate_file (ctx->ssl, path, SSL_FILETYPE_PEM) + || !SSL_use_PrivateKey_file (ctx->ssl, path, SSL_FILETYPE_PEM)) print_error ("%s: %s", "setting the SSL client certificate failed", ERR_error_string (ERR_get_error (), NULL)); free (path);