36,39d35
< If on an TLS/SSL server no special setting is performed using *client_CA_list()
< functions, the certificates contained in B<CAfile> are listed to the client
< as available CAs during the TLS/SSL handshake.
<
53,55d48
< On a server, the certificates in B<CApath> are not listed as available
< CA certificates to a client during a TLS/SSL handshake.
<
64a58,64
> In server mode, when requesting a client certificate, the server must send
> the list of CAs of which it will accept client certificates. This list
> is not influenced by the contents of B<CAfile> or B<CApath> and must
> explicitely be set using the
> L<SSL_CTX_set_client_CA_list(3)|SSL_CTX_set_client_CA_list(3)>
> family of functions.
>
< If on an TLS/SSL server no special setting is performed using *client_CA_list()
< functions, the certificates contained in B<CAfile> are listed to the client
< as available CAs during the TLS/SSL handshake.
<
53,55d48
< On a server, the certificates in B<CApath> are not listed as available
< CA certificates to a client during a TLS/SSL handshake.
<
64a58,64
> In server mode, when requesting a client certificate, the server must send
> the list of CAs of which it will accept client certificates. This list
> is not influenced by the contents of B<CAfile> or B<CApath> and must
> explicitely be set using the
> L<SSL_CTX_set_client_CA_list(3)|SSL_CTX_set_client_CA_list(3)>
> family of functions.
>