The OpenSSL code path wasn't loading the full certificate chain (Issue #465)

diff --git a/CHANGES.md b/CHANGES.md
index f96677675a2aa558fa5d8c209a6bf9909c114ef5..81aef4e680d9d4acd28949ee27c2d656fc9703ff 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -12,6 +12,7 @@ Changes in CUPS v2.4.3 (TBA)
   hostname (Issue #419)
 - Fixed an OpenSSL crash bug (Issue #409)
 - Fixed a potential SNMP OID value overflow issue (Issue #431)
+- Fixed an OpenSSL certificate loading issue (Issue #465)
 - Look for default printer on network if needed (Issue ##452)
 - Now localize HTTP responses using the Content-Language value (Issue #426)
 - Raised file size limit for importing PPD via Web UI (Issue #433)

diff --git a/cups/tls-openssl.c b/cups/tls-openssl.c
index ceb3abaedc507979f34871d87633bf72bc5af10b..acc10fc42087fb03f9856842a6f6ce8f7b4f2f81 100644 (file)
--- a/cups/tls-openssl.c
+++ b/cups/tls-openssl.c
@@ -1055,7 +1055,7 @@ _httpTLSStart(http_t *http)               // I - Connection to server
     }
 
     SSL_CTX_use_PrivateKey_file(context, keyfile, SSL_FILETYPE_PEM);
-    SSL_CTX_use_certificate_file(context, crtfile, SSL_FILETYPE_PEM);
+    SSL_CTX_use_certificate_chain_file(context, crtfile);
   }
 
   // Set TLS options...