botan icon indicating copy to clipboard operation
botan copied to clipboard

TLS intermediate certificate - where to load?

Open tzimmer63 opened this issue 3 years ago • 1 comments

Hi, I've built a working https server with Botan, but I'm only getting a B rating on ssllabs tests because the intermediate certificate is missing in the chain. Can someone give me an advice how and where to load it? The server cert and key is loaded and all is working well, except the missing intermediate cert. Thanks in advance, Thomas

tzimmer63 avatar Sep 13 '22 15:09 tzimmer63

You probably want to override the method Credentials_Manager::find_cert_chain(). That method returns a std::vector<X509_Certificate> which should contain the certificate chain ordered from leaf to root. (Usually, root can be left out.)

reneme avatar Sep 14 '22 10:09 reneme