Rainer Gerhards | 20 May 18:23

client certificate not provided when no common root ca

Hi list,

me again ;) I have a server and client, both with self-signed
certificates and no common root CA. My server requests the client's
certificate. However, it does not receive one when there is no common
root CA. If I add a common root CA to both client and server (but
still have self-signed certs NOT signed by the common CA), I receive
the client certificate.

Is this desired behavior (I think I read it is, but can no longer find
the doc page where it is described). If so, is there any way around it
(e.g. via the certificate retrieve functions)?

Feedback is appreciated.

Thanks,
Rainer

Gmane