jh163888/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ssl_calls: fix to read certificate chains

Browse Source
This commit is contained in:
speidy 2014-12-10 00:04:38 +02:00
parent d9d746ce5c
commit 86005c5bcc
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
common/ssl_calls.c
View File

@ -649,6 +649,12 @@ ssl_tls_accept(struct ssl_tls *self)
return 1; return 1;
} }
if (SSL_CTX_use_certificate_chain_file(self->ctx, self->cert) <= 0)
{
g_writeln("ssl_tls_accept: SSL_CTX_use_certificate_chain_file failed");
return 1;
}
self->ssl = SSL_new(self->ctx); self->ssl = SSL_new(self->ctx);
if (self->ssl == NULL) if (self->ssl == NULL)
@ -657,12 +663,6 @@ ssl_tls_accept(struct ssl_tls *self)
return 1; return 1;
} }
if (SSL_use_certificate_file(self->ssl, self->cert, SSL_FILETYPE_PEM) <= 0)
{
g_writeln("ssl_tls_accept: SSL_use_certificate_file failed");
return 1;
}
if (SSL_set_fd(self->ssl, self->trans->sck) < 1) if (SSL_set_fd(self->ssl, self->trans->sck) < 1)
{ {
g_writeln("ssl_tls_accept: SSL_set_fd failed"); g_writeln("ssl_tls_accept: SSL_set_fd failed");