commit 69addd985deaef06fd2de90a652c30254e024e30
author Ben Peled <bpeled@nvidia.com> Mon Apr 07 09:14:32 2025 -0700
committer Ed Tanous <etanous@nvidia.com> Mon Apr 14 14:53:41 2025 +0000
tree 30c0f01709edad1f69857f223531c71ac067dae5
parent 177612aaa0633cf9d5aef0b763a43135cf552d9b

ssl: Switch to use_certificate_chain for certificate loading

Replace use_certificate with use_certificate_chain to properly handle
both single certificates and certificate chains. This allows loading
and sending the complete certificate chain during TLS handshake,
improving client validation.
Tested with generate_user_auth.py

Change-Id: I8ef1665307ee2e401901a662ac9ee6df7b50937d
Signed-off-by: Ben Peled <bpeled@nvidia.com>

src/ssl_key_handler.cpp

diff --git a/src/ssl_key_handler.cpp b/src/ssl_key_handler.cpp
index b2a78b8..cc11360 100644
--- a/src/ssl_key_handler.cpp
+++ b/src/ssl_key_handler.cpp
@@ -503,7 +503,7 @@
         boost::system::error_code ec;
 
         boost::asio::const_buffer buf(sslPemFile.data(), sslPemFile.size());
-        mSslContext.use_certificate(buf, boost::asio::ssl::context::pem, ec);
+        mSslContext.use_certificate_chain(buf, ec);
         if (ec)
         {
             return false;