# HG changeset patch # User Kim Alvefur # Date 1423151974 -3600 # Node ID b54b33f59c6e9615e875c8ad430219230618ffd6 # Parent d4a68d93ad0434d5c648b1c0d8ac229eaafa3148 certmanager: Limit certificate chain depth to 9 diff -r d4a68d93ad04 -r b54b33f59c6e core/certmanager.lua --- a/core/certmanager.lua Thu Feb 05 16:56:28 2015 +0100 +++ b/core/certmanager.lua Thu Feb 05 16:59:34 2015 +0100 @@ -53,6 +53,7 @@ -- Built-in defaults local core_defaults = { capath = "/etc/ssl/certs"; + depth = 9; protocol = "tlsv1+"; verify = (ssl_x509 and { "peer", "client_once", }) or "none"; options = {