From 1a22ca87f91905a4efd903218348803b199b3956 Mon Sep 17 00:00:00 2001
From: Glenn Strauss <gstrauss@gluelogic.com>
Date: Sat, 4 Nov 2017 16:42:52 -0400
Subject: [PATCH] [mod_openssl] allow specifying server cert chain (fixes
 #2692)

x-ref:
  "allow setting explicit SSL server certificate chain"
  https://redmine.lighttpd.net/issues/2692
  https://github.com/lighttpd/lighttpd1.4/pull/62

github: closes #62
---
 src/mod_openssl.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/mod_openssl.c b/src/mod_openssl.c
index 44ff8922..6001b3fd 100644
--- a/src/mod_openssl.c
+++ b/src/mod_openssl.c
@@ -843,7 +843,8 @@ network_init_ssl (server *srv, void *p_d)
             }
         }
 
-        if (1 != SSL_CTX_use_certificate(s->ssl_ctx, s->ssl_pemfile_x509)) {
+        if (1 != SSL_CTX_use_certificate_chain_file(s->ssl_ctx,
+                                                    s->ssl_pemfile->ptr)) {
             log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:",
                             ERR_error_string(ERR_get_error(), NULL),
                             s->ssl_pemfile);