[src/trunk]: src/libexec/httpd Use a ``certificate chain file'' rather than a...

[elric <elric%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/2ce7d42d1b92
branches:  trunk
changeset: 777479:2ce7d42d1b92
user:      elric <elric%NetBSD.org@localhost>
date:      Mon Feb 20 08:40:46 2012 +0000

description:
Use a ``certificate chain file'' rather than a ``certificate file'' so
that bozohttpd can be used with non-toplevel certs.

diffstat:

 libexec/httpd/ssl-bozo.c |  6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diffs (20 lines):

diff -r d159f88f273b -r 2ce7d42d1b92 libexec/httpd/ssl-bozo.c
--- a/libexec/httpd/ssl-bozo.c  Mon Feb 20 02:14:34 2012 +0000
+++ b/libexec/httpd/ssl-bozo.c  Mon Feb 20 08:40:46 2012 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: ssl-bozo.c,v 1.13 2011/11/18 09:51:31 mrg Exp $        */
+/*     $NetBSD: ssl-bozo.c,v 1.14 2012/02/20 08:40:46 elric Exp $      */
 
 /*     $eterna: ssl-bozo.c,v 1.15 2011/11/18 09:21:15 mrg Exp $        */
 
@@ -176,8 +176,8 @@
                bozo_ssl_err(httpd, EXIT_FAILURE,
                    "SSL context creation failed");
 
-       if (1 != SSL_CTX_use_certificate_file(sslinfo->ssl_context,
-           sslinfo->certificate_file, SSL_FILETYPE_PEM))
+       if (1 != SSL_CTX_use_certificate_chain_file(sslinfo->ssl_context,
+           sslinfo->certificate_file))
                bozo_ssl_err(httpd, EXIT_FAILURE,
                    "Unable to use certificate file '%s'",
                    sslinfo->certificate_file);