Load full certificate chains, not just the leafs

This commit is contained in:
2025-12-15 23:08:31 +01:00
parent 2eb6a5fe9d
commit 02d8206e9d
2 changed files with 4 additions and 4 deletions
+2 -2
View File
@@ -103,7 +103,7 @@ int server_secure_context_init(ServerSecureContext *ctx,
key_buffer[key_file.len] = '\0';
// Load certificate and private key
if (SSL_CTX_use_certificate_file(p, cert_buffer, SSL_FILETYPE_PEM) != 1) {
if (SSL_CTX_use_certificate_chain_file(p, cert_buffer) != 1) {
SSL_CTX_free(p);
return -1;
}
@@ -173,7 +173,7 @@ int server_secure_context_add_certificate(ServerSecureContext *ctx,
memcpy(key_buffer, key_file.ptr, key_file.len);
key_buffer[key_file.len] = '\0';
if (SSL_CTX_use_certificate_file(p, cert_buffer, SSL_FILETYPE_PEM) != 1) {
if (SSL_CTX_use_certificate_chain_file(p, cert_buffer) != 1) {
SSL_CTX_free(p);
return -1;
}