Libretls how to set root certifcate path (path contains multiple root certificates)

Question

0.00/5 (No votes)

See more:

I tried to use tls_config_set_ca_path
But seems libTLS is not using the files in the path set.

tls_config_set_ca_path is success. But when I use tls_write(), the below error is returned.

certificate verification failed: unable to get local issuer certificate

What I have tried:

When i use

tls_config_set_ca_file

using the same file it works perfectly.

But i need to use

tls_config_set_ca_path

[Edited to include comment response]

tls_init()
cfg = tls_config_new()
ls_config_set_ca_path(cfg, "/usr/local/etc/mycerts/CA-certificates")
tls_config_set_protocols(cfg, TLS_PROTOCOL_TLSv1_3)
ctx = tls_client()
tls_configure(ctx, cfg)
tls_connect_socket(ctx,readsoc, "abc")
tls_write(ctx, buf, buflen)

Posted 13-Aug-20 20:13pm

dilsdgr8

Updated 13-Aug-20 21:16pm

Garth J Lancaster

v4

Add a Solution

Comments

Garth J Lancaster 14-Aug-20 2:38am

can you use Use Improve question to update your question with your init code ? What is the return code from the tls_config_set_ca_path function ?

dilsdgr8 14-Aug-20 2:56am

tls_init()
cfg = tls_config_new()
ls_config_set_ca_path(cfg, "/usr/local/etc/mycerts/CA-certificates")
tls_config_set_protocols(cfg, TLS_PROTOCOL_TLSv1_3)
ctx = tls_client()
tls_configure(ctx, cfg)
tls_connect_socket(ctx,readsoc, "abc")
tls_write(ctx, buf, buflen)

Garth J Lancaster 14-Aug-20 3:31am

so what is the return code from the

tls_config_set_ca_path(cfg, "/usr/local/etc/mycerts/CA-certificates")

call, as in

int tcscp = tls_config_set_ca_path(cfg, "/usr/local/etc/mycerts/CA-certificates")

? my guess would be -1 ...

Stefan_Lang 14-Aug-20 3:34am

I've never used these commands myself, but whenever I set a path with any function, I usually add a final '/'. Just a shot in the dark...

P.S.: didn't you forget a leading 't' in that call to tls_config_set_ca_path(), or is that a typo in your code?

Garth J Lancaster 14-Aug-20 4:02am

I think that's a typo/cut&paste error Stefan - I left it as it was for the OP .. good call on the '/' at the end of the path though, I hope the OP sees it

Stefan_Lang 17-Aug-20 4:12am

I fully expect it to be a typo, because otherwise the compiler should complain. But I've seen too many cases of inane macro definitions to exclude a typo-induced bug that the compiler wouldn't notice.

Besides, if there's one obvious typo in the code that makes it uncompilable, who's to say there aren't less obvious ones that don't? :o)

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)