<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Sorry again. I didn't use the hash format in the directory. It works fine when I did.</p>
<p>Thanks. And sorry for the inconvenience.</p>
<p><br>
</p>
<div id="Signature">
<div class="BodyFragment"><font size="2">
<div class="PlainText">Best Regards, <br>
----------------------------------- <br>
Bill Chen <br>
EMAIL: bill.chen@ecitele.com <br>
TEL: 8152<br>
MOBILE: 13606506984 <br>
-----------------------------------</div>
</font></div>
</div>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Bill Chen<br>
<b>Sent:</b> Friday, December 4, 2015 10:54 PM<br>
<b>To:</b> omniorb-list@omniorb-support.com<br>
<b>Subject:</b> RE: V4.2.1, SSL CA Path issue</font>
<div> </div>
</div>
<div>
<div>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">Sorry, one correction: the line I added to the eg2_impl.cc was :</span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i><span style="background:yellow">//I added this line</span></i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i><span style="background:yellow"> sslContext::certificate_authority_path = "/home/foo/trustedca”;</span></i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D"> </span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">it doesn’t work.</span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D"> </span></p>
<div>
<p style="line-height: 115%; margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size:9.0pt; line-height:115%; font-family:"Arial","sans-serif"; color:#031432">Best Regards,</span></b></p>
<p style="line-height: 115%; margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size:9.0pt; line-height:115%; font-family:"Arial","sans-serif"; color:#031432">Bill Chen</span></b><span style="color:#1F497D"></span></p>
</div>
<div>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0cm 0cm 0cm">
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> Bill Chen
<br>
<b>Sent:</b> 2015</span><span lang="ZH-CN" style="font-size:10.0pt; font-family:宋体">年</span><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">12</span><span lang="ZH-CN" style="font-size:10.0pt; font-family:宋体">月</span><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">4</span><span lang="ZH-CN" style="font-size:10.0pt; font-family:宋体">日</span><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">
22:50<br>
<b>To:</b> 'omniorb-list@omniorb-support.com'<br>
<b>Subject:</b> V4.2.1, SSL CA Path issue</span></p>
</div>
</div>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
Hello everyone,</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
omniORB V4.2.1 introduces a very important feature for SSL: a new attribute named
<i>certificate_authority_path</i> in sslContext.h. It’s designed to put all trusted certificates in the folder.</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
When I tested this feature, I found the certificates in this folder just didn’t work. What I did was to add a new line in examples/ssl_echo/eg2_impl.cc like the following, and put one certificate (in pem format) to the “/home/foo/trustedca” folder:</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i>//…</i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i>int main(int argc, char** argv)</i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i>{</i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i> sslContext::certificate_authority_file = "root.pem";</i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i> </i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i><span style="background:yellow">//I added this line</span></i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i><span style="background:yellow"> sslContext::certificate_authority_<span style="color:#1F497D">path</span> = "/home/foo/trustedca”;</span></i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i> </i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i> sslContext::key_file = "server.pem";</i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i> sslContext::key_file_password = "password";</i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<i>//…</i></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
If I move the certificate to the root.pem file, it works fine.</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
Did I do anything wrong? Thanks.</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p style="line-height: 115%; margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size:9.0pt; line-height:115%; font-family:"Arial","sans-serif"; color:#031432">Best Regards,</span></b></p>
<p style="line-height: 115%; margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size:9.0pt; line-height:115%; font-family:"Arial","sans-serif"; color:#031432">Bill Chen</span></b></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
</div>
</div>
</div>
</div>
</body>
</html>