0006434: add certificate-chain-file to SniHost.

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0006434

[Resin]

minor

always

07-28-21 12:35

09-15-21 15:40

Reporter

ferg

View Status

public

Assigned To

ferg

Priority

normal

Resolution

open

Platform

Status

closed

Projection

none

OS Version

ETA

none

Fixed in Version

4.0.66

Product Version

Product Build

Summary

0006434: add certificate-chain-file to SniHost.

Description

(rep by Brygid)

It looks like SNI host does not support the <certificate-chain-file> attribute; Resin 4.0.63 logs the following error:

'certificate-chain-file' is an unknown property of 'com.caucho.vfs.OpenSSLFactory$SniHost'

How does one go about specifying a certificate-chain-file for a SNI host?

Any help would be appreciated.

Thank you.

Here's what we have:

<openssl>
  <protocol>...</protocol>
  <cipher-suite>...</cipher-suite>
  <honor-cipher-order>true</honor-cipher-order>
  <certificate-file>domain1.com.crt</certificate-file>
  <certificate-key-file>domain1.com.key</certificate-key-file>
  <certificate-chain-file>domain1.com_chain.crt</certificate-chain-file>

  <host id="domain2.com">
    <certificate-file>domain2.com.crt</certificate-file>
    <certificate-key-file>domain2.com.key</certificate-key-file>
    <certificate-chain-file>domain2.com_chain.crt</certificate-chain-file>
  </host>
</openssl>

Steps To Reproduce

Additional Information

Attached Files

Relationships

Notes
(0006995) ferg 09-15-21 15:40	network/040h

Issue History
Date Modified	Username	Field	Change
07-28-21 12:35	ferg	New Issue
08-06-21 23:44	linneasmith	Note Added: 0006992
08-07-21 08:02	ferg	Note Deleted: 0006992
09-15-21 15:40	ferg	Note Added: 0006995
09-15-21 15:40	ferg	Assigned To	=> ferg
09-15-21 15:40	ferg	Status	new => closed
09-15-21 15:40	ferg	Fixed in Version	=> 4.0.66

Mantis 1.0.0rc3[^]

31 total queries executed.
26 unique queries executed.