commit 228fc95bd645e9d5029ed1d2cb0a764d60c7b8a1
author Maxim Dounin <mdounin@mdounin.ru> Thu May 19 14:46:32 2016 +0300
committer Maxim Dounin <mdounin@mdounin.ru> Thu May 19 14:46:32 2016 +0300
tree abfcb93d5f514be45bd8eb8888304aa46df1939a
parent dee13903fb412360cf171f9dc04308530f7d56ae

SSL: support for per-certificate chains.

The SSL_CTX_add0_chain_cert() function as introduced in OpenSSL 1.0.2 now
used instead of SSL_CTX_add_extra_chain_cert().

SSL_CTX_add_extra_chain_cert() adds extra certs for all certificates
in the context, while SSL_CTX_add0_chain_cert() only to a particular
certificate.  There is no difference unless multiple certificates are used,
though it is important when using multiple certificates.

Additionally, SSL_CTX_select_current_cert() is now called before using
a chain to make sure correct chain will be returned.