add new optional config for tls_certificate_chain_path for folks with intermediary SSL certs

This commit is contained in:
Matthew Hodgson 2015-07-08 18:20:02 +01:00
parent dfc74c30c9
commit 64afbe6ccd
2 changed files with 19 additions and 3 deletions

View file

@ -38,6 +38,8 @@ class ServerContextFactory(ssl.ContextFactory):
logger.exception("Failed to enable eliptic curve for TLS")
context.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3)
context.use_certificate(config.tls_certificate)
if config.tls_certificate_chain:
context.use_certificate_chain_file(config.tls_certificate_chain)
if not config.no_tls:
context.use_privatekey(config.tls_private_key)