[TS-2563] Set the SSL default verify paths when ssl.client.verify.server=1

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 5.0.0
• Component/s: SSL
• Assignee: James Peach
• Reporter: Wei Sun
• Created: 10/Feb/14 14:55
• Updated: 18/Dec/14 05:11
• Resolved: 25/Feb/14 17:15

Description

When working at reverse proxy mode with the following remap rule:
map https://xxx1.com https://xxx2.com

ssl.client.verify.server=1

If xxx2.com is providing trusted certificate and 'ssl.client.CA.cert.filename' is NULL, ats should be able to verify the certificate in terms of the default provided CAs.