X-Git-Url: https://code.citadel.org/?a=blobdiff_plain;f=webcit%2Fcrypto.c;h=5e690e4e745cae0eb0d31618a6b779e7410d1fa4;hb=02b6dfb4a25532e0a644cb0a79a44f0149bbd545;hp=27e6893d07412c5aaed5115a9fc334284822c7eb;hpb=ef9c7f3a4fa7f7d3771402487c972bb91aa5465c;p=citadel.git

diff --git a/webcit/crypto.c b/webcit/crypto.c
index 27e6893d0..5e690e4e7 100644
--- a/webcit/crypto.c
+++ b/webcit/crypto.c
@@ -332,8 +332,10 @@ void init_ssl(void)
 
 	/*
 	 * Now try to bind to the key and certificate.
+	 * Note that we use SSL_CTX_use_certificate_chain_file() which allows
+	 * the certificate file to contain intermediate certificates.
 	 */
-	SSL_CTX_use_certificate_file(ssl_ctx, CTDL_CER_PATH, SSL_FILETYPE_PEM);
+	SSL_CTX_use_certificate_chain_file(ssl_ctx, CTDL_CER_PATH);
 	SSL_CTX_use_PrivateKey_file(ssl_ctx, CTDL_KEY_PATH, SSL_FILETYPE_PEM);
 	if ( !SSL_CTX_check_private_key(ssl_ctx) ) {
 		lprintf(3, "Cannot install certificate: %s\n",