Bug#883855: [nnrpd-ssl]: Does not send intermediate certificates

2017-12-09 Thread Michael Bussmann
Hi, On 2017-12-08 10:49:33 -0800, Russ Allbery wrote: > INN does this in a kind of old-school way and expects you to set tlscafile > or tlscapath to the separate file or directory containing the trust chain. > (Not saying we shouldn't change this to also support a cert chain in the > cert file, bu

Bug#883855: [nnrpd-ssl]: Does not send intermediate certificates

2017-12-08 Thread Russ Allbery
Michael Bussmann writes: > It seems nnrpd -S does not send intermediate certificates that are > included in tlscertfile. Instead only the first certificate is > presented. > On first glance it might be fixed by replacing > SSL_CTX_use_certificate_file() with SSL_CTX_use_certificate_chain_file()

Bug#883855: [nnrpd-ssl]: Does not send intermediate certificates

2017-12-08 Thread Michael Bussmann
Package: inn2 Version: 2.6.1-2 Severity: minor Hi It seems nnrpd -S does not send intermediate certificates that are included in tlscertfile. Instead only the first certificate is presented. On first glance it might be fixed by replacing SSL_CTX_use_certificate_file() with SSL_CTX_use_certifica