From: Adam Dickmeiss <adam@indexdata.dk>
Date: Fri, 9 Jun 2006 12:40:53 +0000 (+0000)
Subject: SSL comstack uses SL_CTX_use_certificate_chain_file rather than
X-Git-Tag: YAZ.2.1.22~17
X-Git-Url: http://git.indexdata.com/?p=yaz-moved-to-github.git;a=commitdiff_plain;h=61a2c61568817a54422e52a1fe242b8ee1857920

SSL comstack uses SL_CTX_use_certificate_chain_file rather than
SL_CTX_use_certificate_file. See
http://lists.indexdata.dk/pipermail/yazlist/2006-June/001615.html
---

diff --git a/NEWS b/NEWS
index 1813a1e..8a90459 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,8 @@
+SSL comstack uses SL_CTX_use_certificate_chain_file rather than
+SL_CTX_use_certificate_file. See
+http://lists.indexdata.dk/pipermail/yazlist/2006-June/001615.html
+for more info. Thanks to Ko van der Sloot.
+
 --- 2.1.20 2006/06/02
 
 Bug #600: SRU GET, POST support for yaz-client. Introduced
diff --git a/src/tcpip.c b/src/tcpip.c
index 6400e7d..02353c9 100644
--- a/src/tcpip.c
+++ b/src/tcpip.c
@@ -2,7 +2,7 @@
  * Copyright (C) 1995-2005, Index Data ApS
  * See the file LICENSE for details.
  *
- * $Id: tcpip.c,v 1.17 2005-07-19 12:40:52 mike Exp $
+ * $Id: tcpip.c,v 1.18 2006-06-09 12:40:53 adam Exp $
  */
 /**
  * \file tcpip.c
@@ -490,8 +490,7 @@ static int tcpip_bind(COMSTACK h, void *address, int mode)
         if (sp->ctx_alloc)
         {
             int res;
-            res = SSL_CTX_use_certificate_file (sp->ctx, sp->cert_fname,
-                                                SSL_FILETYPE_PEM);
+            res = SSL_CTX_use_certificate_chain_file(sp->ctx, sp->cert_fname);
             if (res <= 0)
             {
                 ERR_print_errors_fp(stderr);