0006434: add certificate-chain-file to SniHost.

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0006434

[Resin]

minor

always

07-28-21 12:35

09-15-21 15:40

Reporter

ferg

View Status

public

Assigned To

ferg

Priority

normal

Resolution

open

Status

closed

Product Version

Summary

0006434: add certificate-chain-file to SniHost.

Description

(rep by Brygid)

It looks like SNI host does not support the <certificate-chain-file> attribute; Resin 4.0.63 logs the following error:

'certificate-chain-file' is an unknown property of 'com.caucho.vfs.OpenSSLFactory$SniHost'

How does one go about specifying a certificate-chain-file for a SNI host?

Any help would be appreciated.

Thank you.

Here's what we have:

<openssl>
  <protocol>...</protocol>
  <cipher-suite>...</cipher-suite>
  <honor-cipher-order>true</honor-cipher-order>
  <certificate-file>domain1.com.crt</certificate-file>
  <certificate-key-file>domain1.com.key</certificate-key-file>
  <certificate-chain-file>domain1.com_chain.crt</certificate-chain-file>

  <host id="domain2.com">
    <certificate-file>domain2.com.crt</certificate-file>
    <certificate-key-file>domain2.com.key</certificate-key-file>
    <certificate-chain-file>domain2.com_chain.crt</certificate-chain-file>
  </host>
</openssl>

Additional Information

Attached Files

Relationships

Notes
(0006995) ferg 09-15-21 15:40	network/040h

Issue History
Date Modified	Username	Field	Change
07-28-21 12:35	ferg	New Issue
08-06-21 23:44	linneasmith	Note Added: 0006992
08-07-21 08:02	ferg	Note Deleted: 0006992
09-15-21 15:40	ferg	Note Added: 0006995
09-15-21 15:40	ferg	Assigned To	=> ferg
09-15-21 15:40	ferg	Status	new => closed
09-15-21 15:40	ferg	Fixed in Version	=> 4.0.66

Mantis 1.0.0rc3[^]

31 total queries executed.
26 unique queries executed.