CVS: cvs.openbsd.org: src

[Reyk Floeter <reyk_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	reyk_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2009/04/02 08:30:51

Modified files:
	usr.sbin/relayd: parse.y relay.c relayd.conf.5 relayd.h 
	                 ssl_privsep.c 

Log message:
add support to specify a ca file (eg. /etc/ssl/cert.pem) to verify ssl
server certificates when connecting as an SSL client from relays.  it
works so far, but needs more testing and is currently lacking support
for certificate revocation (like CRL or OCSP).  the file ssl_privsep.c
is extended to implement more code that should be in openssl to allow
loading the ca from chroot...