crypto: add deprecated ValiCert CA for cross cert
authorShigeki Ohtsu <ohtsu@iij.ad.jp>
Fri, 13 Mar 2015 00:55:29 +0000 (09:55 +0900)
committerShigeki Ohtsu <ohtsu@iij.ad.jp>
Fri, 13 Mar 2015 11:18:54 +0000 (20:18 +0900)
commitd8c4a932c9a50b7c456baabfbba046b9e4f09dd1
tree770acadcded1ab82d1016544d09f2597d8892b80
parent82f067e60bb3eb87cc1119655ae0a5968e988326
crypto: add deprecated ValiCert CA for cross cert

The host of melissadata.net has a cross root certification between
Starfield Class 2 and ValiCert Class 2. OpenSSL-1.0.1 only looks up
a cert chain to the deprecated ValiCert Class 2 CA and causes
untrusted error. We add it for a short-term remedy and it is to be
removed after upgrading OpenSSSL-1.0.2 and applying private patches
to support alternative cert chains.
See #402 and #589.

Fixes: https://github.com/iojs/io.js/issues/923
PR-URL: https://github.com/iojs/io.js/pull/1135
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
src/node_root_certs.h
test/internet/test-tls-connnect-melissadata.js [new file with mode: 0644]