cozis/cHTTP
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Load full certificate chains, not just the leafs

Browse Source
This commit is contained in:
cozis
2025-12-15 23:08:31 +01:00
parent 2eb6a5fe9d
commit 02d8206e9d
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
chttp.c
+2 -2
View File
@@ -1868,7 +1868,7 @@ int server_secure_context_init(ServerSecureContext *ctx,
key_buffer[key_file.len] = '\0'; key_buffer[key_file.len] = '\0';
// Load certificate and private key // Load certificate and private key
if (SSL_CTX_use_certificate_file(p, cert_buffer, SSL_FILETYPE_PEM) != 1) { if (SSL_CTX_use_certificate_chain_file(p, cert_buffer) != 1) {
SSL_CTX_free(p); SSL_CTX_free(p);
return -1; return -1;
} }
@@ -1938,7 +1938,7 @@ int server_secure_context_add_certificate(ServerSecureContext *ctx,
memcpy(key_buffer, key_file.ptr, key_file.len); memcpy(key_buffer, key_file.ptr, key_file.len);
key_buffer[key_file.len] = '\0'; key_buffer[key_file.len] = '\0';
if (SSL_CTX_use_certificate_file(p, cert_buffer, SSL_FILETYPE_PEM) != 1) { if (SSL_CTX_use_certificate_chain_file(p, cert_buffer) != 1) {
SSL_CTX_free(p); SSL_CTX_free(p);
return -1; return -1;
} }
src/secure_context.c
+2 -2
View File
@@ -103,7 +103,7 @@ int server_secure_context_init(ServerSecureContext *ctx,
key_buffer[key_file.len] = '\0'; key_buffer[key_file.len] = '\0';
// Load certificate and private key // Load certificate and private key
if (SSL_CTX_use_certificate_file(p, cert_buffer, SSL_FILETYPE_PEM) != 1) { if (SSL_CTX_use_certificate_chain_file(p, cert_buffer) != 1) {
SSL_CTX_free(p); SSL_CTX_free(p);
return -1; return -1;
} }
@@ -173,7 +173,7 @@ int server_secure_context_add_certificate(ServerSecureContext *ctx,
memcpy(key_buffer, key_file.ptr, key_file.len); memcpy(key_buffer, key_file.ptr, key_file.len);
key_buffer[key_file.len] = '\0'; key_buffer[key_file.len] = '\0';
if (SSL_CTX_use_certificate_file(p, cert_buffer, SSL_FILETYPE_PEM) != 1) { if (SSL_CTX_use_certificate_chain_file(p, cert_buffer) != 1) {
SSL_CTX_free(p); SSL_CTX_free(p);
return -1; return -1;
} }