From c43a6ef57aa29efda944c0cf9c4d10f28feeb929 Mon Sep 17 00:00:00 2001 From: Fredrik Gustafsson Date: Mon, 25 Mar 2013 14:27:58 +0100 Subject: Added comment about proxy certificates --- lib/ssl/src/ssl_connection.erl | 2 ++ 1 file changed, 2 insertions(+) (limited to 'lib/ssl/src/ssl_connection.erl') diff --git a/lib/ssl/src/ssl_connection.erl b/lib/ssl/src/ssl_connection.erl index 2ac5e8ebb2..4f241ecc0a 100644 --- a/lib/ssl/src/ssl_connection.erl +++ b/lib/ssl/src/ssl_connection.erl @@ -1151,6 +1151,8 @@ init_certificates(undefined, CertDbRef, CertDbHandle, FileRefHandle, PemCacheHan init_certificates(undefined, CertDbRef, CertDbHandle, FileRefHandle, PemCacheHandle, CacheHandle, CertFile, client) -> try + %% Ignoring potential proxy-certificates see: + %% http://dev.globus.org/wiki/Security/ProxyFileFormat [OwnCert|_] = ssl_certificate:file_to_certificats(CertFile, PemCacheHandle), {ok, CertDbRef, CertDbHandle, FileRefHandle, PemCacheHandle, CacheHandle, OwnCert} catch _Error:_Reason -> -- cgit v1.2.3