tatsuhiro-t/spdylay

--verify-client not work

hueyless opened this issue · 2 comments

chrome <-> shrpx(-p) <---> shrpx(-s) <-> polipo

shrpx(-p) --cacert=ca.crt client.key client.crt
shrpx(-s) --verify-client --verify-client-cacert=ca.crt server.key server.crt

client.crt and server.crt both signed by ca.crt

log says:
[INFO] [DSPDY:0xcdbd10] Connecting to downstream server
(shrpx_spdy_session.cc:393)
[INFO] [DSPDY:0xcdbd10] Network error
(shrpx_spdy_session.cc:273)
[INFO] [DSPDY:0xcdbd10] Disconnecting

So does --verify-client works for shrpx(-p) mode?

Currently, shrpx -p does not support client cert submission. It will be added soon.

Fix committed in 4b59952