From 664c92cddeaa7ec7e83ff29a62d6f5f701d0ae33 Mon Sep 17 00:00:00 2001
From: Kim Alvefur <zash@zash.se>
Date: Thu, 5 Feb 2015 16:59:34 +0100
Subject: certmanager: Limit certificate chain depth to 9

---
 core/certmanager.lua | 1 +
 1 file changed, 1 insertion(+)

(limited to 'core')

diff --git a/core/certmanager.lua b/core/certmanager.lua
index d92e5fc1..9a0c3deb 100644
--- a/core/certmanager.lua
+++ b/core/certmanager.lua
@@ -53,6 +53,7 @@ local global_ssl_config = configmanager.get("*", "ssl");
 -- Built-in defaults
 local core_defaults = {
 	capath = "/etc/ssl/certs";
+	depth = 9;
 	protocol = "tlsv1+";
 	verify = (ssl_x509 and { "peer", "client_once", }) or "none";
 	options = {
-- 
cgit v1.2.3