From ae03d2e4e88ae8b7d35dcb0caabc0a93c03a27a6 Mon Sep 17 00:00:00 2001 From: Bram Matthys Date: Sun, 9 Apr 2006 16:51:04 +0000 Subject: [PATCH] - Added chained SSL certificates support, patch provided by justdave (#0002848). --- Changes | 1 + src/ssl.c | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/Changes b/Changes index 1c2a724c2..32ffe9350 100644 --- a/Changes +++ b/Changes @@ -1094,3 +1094,4 @@ - Fixed (unimportant) DNS resolver problem if using some LAN domains with digits at end, reported by Bock (#0002843). - Added minidump support for crashes to aid debugging a bit. +- Added chained SSL certificates support, patch provided by justdave (#0002848). diff --git a/src/ssl.c b/src/ssl.c index 73b90cc0c..6f40920f8 100644 --- a/src/ssl.c +++ b/src/ssl.c @@ -189,7 +189,7 @@ void init_ctx_server(void) | (iConf.ssl_options & SSLFLAG_FAILIFNOCERT ? SSL_VERIFY_FAIL_IF_NO_PEER_CERT : 0), ssl_verify_callback); SSL_CTX_set_session_cache_mode(ctx_server, SSL_SESS_CACHE_OFF); - if (SSL_CTX_use_certificate_file(ctx_server, SSL_SERVER_CERT_PEM, SSL_FILETYPE_PEM) <= 0) + if (SSL_CTX_use_certificate_chain_file(ctx_server, SSL_SERVER_CERT_PEM) <= 0) { ircd_log(LOG_ERROR, "Failed to load SSL certificate %s", SSL_SERVER_CERT_PEM); exit(3);