[mod_openssl] allow specifying server cert chain (fixes #2692)

x-ref:
  "allow setting explicit SSL server certificate chain"
  https://redmine.lighttpd.net/issues/2692
  https://github.com/lighttpd/lighttpd1.4/pull/62

github: closes #62
This commit is contained in:
Glenn Strauss 2017-11-04 16:42:52 -04:00
parent 35ecd4dd9d
commit 1a22ca87f9
1 changed files with 2 additions and 1 deletions

View File

@ -843,7 +843,8 @@ network_init_ssl (server *srv, void *p_d)
}
}
if (1 != SSL_CTX_use_certificate(s->ssl_ctx, s->ssl_pemfile_x509)) {
if (1 != SSL_CTX_use_certificate_chain_file(s->ssl_ctx,
s->ssl_pemfile->ptr)) {
log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:",
ERR_error_string(ERR_get_error(), NULL),
s->ssl_pemfile);