From 6e5f2ceead4b4b03c0f3308fcbc8328e3841690d Mon Sep 17 00:00:00 2001 From: William Lallemand Date: Thu, 1 Aug 2019 14:43:20 +0200 Subject: [PATCH] BUG/MEDIUM: ssl: open the right path for multi-cert bundle Multi-cert bundle was not working anymore because we tried to open the wrong path. --- src/ssl_sock.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/ssl_sock.c b/src/ssl_sock.c index f38a35f1a..98f677bea 100644 --- a/src/ssl_sock.c +++ b/src/ssl_sock.c @@ -3182,7 +3182,7 @@ static struct ckch_node *ckchn_load_cert_file(char *path, int multi, char **err) #endif if (!found) { - memprintf(err, "%sDidn't find any certificate.\n", err && *err ? *err : ""); + memprintf(err, "%sDidn't find any certificate for bundle '%s'.\n", err && *err ? *err : "", path); goto end; } /* insert into the ckchn tree */ @@ -3664,7 +3664,7 @@ ignore_entry: return cfgerr; } - ckchn = ckchn_load_cert_file(fp, 1, err); + ckchn = ckchn_load_cert_file(path, 1, err); if (!ckchn) return 1; cfgerr = ssl_sock_load_multi_ckchn(path, ckchn, bind_conf, NULL, NULL, 0, err);