From 9b3d4b215208ab7ec4f9b5ec1f356fa2f062b802 Mon Sep 17 00:00:00 2001 From: David Galeano Date: Thu, 10 Jan 2013 10:11:21 +0800 Subject: [PATCH] Using "SSL_CTX_use_certificate_chain_file" instead of "SSL_CTX_use_certificate_file" to support server certificates signed by intermediaries. --- lib/libwebsockets.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/libwebsockets.c b/lib/libwebsockets.c index 2f8b4536..18c780b5 100644 --- a/lib/libwebsockets.c +++ b/lib/libwebsockets.c @@ -2800,8 +2800,8 @@ libwebsocket_create_context(int port, const char *interf, /* openssl init for server sockets */ /* set the local certificate from CertFile */ - n = SSL_CTX_use_certificate_file(context->ssl_ctx, - ssl_cert_filepath, SSL_FILETYPE_PEM); + n = SSL_CTX_use_certificate_chain_file(context->ssl_ctx, + ssl_cert_filepath); if (n != 1) { fprintf(stderr, "problem getting cert '%s': %s\n", ssl_cert_filepath,