Created by: hyde-zhang
I think the SocketUseSSL
config actually makes the code skips the SocketCAFile
config when it is set to Y
.
Since we have SocketCAFile
option to use a supplied CA certificate to verify server identity, we still need the part of the code to add the supplied CA certificate to the CertPool
and other functionalities. Skipping client authentication shouldn't skip everything.