You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2023/06/14 09:37:21 UTC

[Bug 66647] New: Analyze usefulness and consider deprecation of certificateChainFile in favor of certificateFile

https://bz.apache.org/bugzilla/show_bug.cgi?id=66647

            Bug ID: 66647
           Summary: Analyze usefulness and consider deprecation of
                    certificateChainFile in favor of certificateFile
           Product: Tomcat 9
           Version: 9.0.75
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Connectors
          Assignee: dev@tomcat.apache.org
          Reporter: michaelo@apache.org
  Target Milestone: -----

This is a spinoff of Bug 66635.

Our OpenSSL code is mostly based on HTTPd's mod_ssl. HTTPd has deprecated
SSLCertificateChainFile
(https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcertificatechainfile)
long time ago in favor of SSLCertificateFile which can contain the entire chain
already.

Out task is to:
* Analyse our usage (code-wise) for/of both parameters and update to the
behavior of mod_ssl
* Deprecate certificateChainFile then in favor of certificateFile
* Ideally remove in Tomcat 11 then

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 66647] Analyze usefulness and consider deprecation of certificateChainFile in favor of certificateFile

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=66647

Matafagafo <ma...@yahoo.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |matafagafo@yahoo.com

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 66647] Analyze usefulness and consider deprecation of certificateChainFile in favor of certificateFile

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=66647

Michael Osipov <mi...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |michaelo@apache.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org