Mantis - Resin
Viewing Issue Advanced Details
6434 minor always 07-28-21 12:35 09-15-21 15:40
ferg  
ferg  
normal  
closed  
open  
none    
none 4.0.66  
0006434: add certificate-chain-file to SniHost.
(rep by Brygid)

It looks like SNI host does not support the <certificate-chain-file> attribute; Resin 4.0.63 logs the following error:

'certificate-chain-file' is an unknown property of 'com.caucho.vfs.OpenSSLFactory$SniHost'

How does one go about specifying a certificate-chain-file for a SNI host?

Any help would be appreciated.

Thank you.

Here's what we have:

<openssl>
  <protocol>...</protocol>
  <cipher-suite>...</cipher-suite>
  <honor-cipher-order>true</honor-cipher-order>
  <certificate-file>domain1.com.crt</certificate-file>
  <certificate-key-file>domain1.com.key</certificate-key-file>
  <certificate-chain-file>domain1.com_chain.crt</certificate-chain-file>

  <host id="domain2.com">
    <certificate-file>domain2.com.crt</certificate-file>
    <certificate-key-file>domain2.com.key</certificate-key-file>
    <certificate-chain-file>domain2.com_chain.crt</certificate-chain-file>
  </host>
</openssl>

Notes
(0006995)
ferg   
09-15-21 15:40   
network/040h