Fix an error with ssl certificates (#283)

an-tao · web-flow · commit fee6577d722f · 2023-08-16T17:54:41.000+08:00
diff --git a/trantor/net/inner/tlsprovider/OpenSSLProvider.cc b/trantor/net/inner/tlsprovider/OpenSSLProvider.cc
@@ -806,9 +806,9 @@ SSLContextPtr trantor::newSSLContext(const TLSPolicy &policy, bool isServer)
                                             isServer);
     if (!policy.getCertPath().empty() && !policy.getKeyPath().empty())
     {
-        if (SSL_CTX_use_certificate_file(ctx->ctx(),
-                                         policy.getCertPath().data(),
-                                         SSL_FILETYPE_PEM) <= 0)
+        if (SSL_CTX_use_certificate_chain_file(ctx->ctx(),
+                                               policy.getCertPath().data()) <=
+            0)
         {
             throw std::runtime_error("Failed to load certificate " +
                                      policy.getCertPath());

Original file line number	Diff line number	Diff line change
`@@ -806,9 +806,9 @@ SSLContextPtr trantor::newSSLContext(const TLSPolicy &policy, bool isServer)`
`806`	`806`	`isServer);`
`807`	`807`	`if (!policy.getCertPath().empty() && !policy.getKeyPath().empty())`
`808`	`808`	`{`
`809`		`- if (SSL_CTX_use_certificate_file(ctx->ctx(),`
`810`		`- policy.getCertPath().data(),`
`811`		`- SSL_FILETYPE_PEM) <= 0)`
	`809`	`+ if (SSL_CTX_use_certificate_chain_file(ctx->ctx(),`
	`810`	`+ policy.getCertPath().data()) <=`
	`811`	`+ 0)`
`812`	`812`	`{`
`813`	`813`	`throw std::runtime_error("Failed to load certificate " +`
`814`	`814`	`policy.getCertPath());`