From 591d0ba5bb5852778d4fb406ff4d78eeecb05946 Mon Sep 17 00:00:00 2001
From: Tilka <tilkax@gmail.com>
Date: Fri, 6 Sep 2013 01:44:25 +0200
Subject: [PATCH] Support certificate chains

---
 src/core/config.xml   | 2 +-
 src/network/openssl.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/core/config.xml b/src/core/config.xml
index a020d04..1561478 100644
--- a/src/core/config.xml
+++ b/src/core/config.xml
@@ -432,7 +432,7 @@
 	<option name="tls_certificate" type="file" default="">
 		<short>Certificate file</short>
 		<description><![CDATA[
-			Path to a TLS/SSL certificate (PEM format).
+			Path to a TLS/SSL certificate or certificate chain (PEM format).
 		]]></description>
 		<since>0.3.0</since>
 	</option>
diff --git a/src/network/openssl.c b/src/network/openssl.c
index db2daf3..6e7431c 100644
--- a/src/network/openssl.c
+++ b/src/network/openssl.c
@@ -127,7 +127,7 @@ extern void net_ssl_context_destroy(struct ssl_context_handle* ctx_)
 int ssl_load_certificate(struct ssl_context_handle* ctx_, const char* pem_file)
 {
 	struct net_context_openssl* ctx = (struct net_context_openssl*) ctx_;
-	if (SSL_CTX_use_certificate_file(ctx->ssl_ctx, pem_file, SSL_FILETYPE_PEM) < 0)
+	if (SSL_CTX_use_certificate_chain_file(ctx->ssl_ctx, pem_file) < 0)
 	{
 		LOG_ERROR("SSL_CTX_use_certificate_file: %s", ERR_error_string(ERR_get_error(), NULL));
 		return 0;