1
0
Fork 0
mirror of https://github.com/puma/puma.git synced 2022-11-09 13:48:40 -05:00

Use SSL_CTX_use_certificate_chain_file for full chain

Allows Puma to parse SSL certificate files that contain multiple chained
certificates, ordered from your certificate down to the root (like nginx).
This commit is contained in:
Scott J. Goldman 2015-10-20 00:22:59 -07:00
parent d56ad84642
commit 0168a2ef10

View file

@ -136,7 +136,7 @@ VALUE engine_init_server(VALUE self, VALUE mini_ssl_ctx) {
ctx = SSL_CTX_new(SSLv23_server_method());
conn->ctx = ctx;
SSL_CTX_use_certificate_file(ctx, RSTRING_PTR(cert), SSL_FILETYPE_PEM);
SSL_CTX_use_certificate_chain_file(ctx, RSTRING_PTR(cert));
SSL_CTX_use_PrivateKey_file(ctx, RSTRING_PTR(key), SSL_FILETYPE_PEM);
if (!NIL_P(ca)) {