X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=plc.d%2Fssl;h=2c8a4a47d7b6e57c0750ba64f07f9f3af93fb3e3;hb=e8e65f312ea2c6e86430ed72da6ba049873a0fdb;hp=90cd41a3b11584cbd976587151b14fee25fda57c;hpb=d34a5737ff90555408e8b57654736a82d07061fc;p=myplc.git

diff --git a/plc.d/ssl b/plc.d/ssl
index 90cd41a..2c8a4a4 100755
--- a/plc.d/ssl
+++ b/plc.d/ssl
@@ -139,13 +139,20 @@ case "$1" in
 	    fi
 	    ssl_key=PLC_${server}_SSL_KEY
 	    ssl_crt=PLC_${server}_SSL_CRT
+	    ssl_ca_crt=PLC_${server}_CA_SSL_CRT
 
 	    symlink ${!ssl_crt} /etc/pki/tls/certs/localhost.crt
 	    symlink ${!ssl_key} /etc/pki/tls/private/localhost.key
+	    symlink ${!ssl_ca_crt} /etc/pki/tls/certs/server-chain.crt
 	    symlink ${!ssl_crt} /etc/httpd/conf/ssl.crt/server.crt
 	    symlink ${!ssl_key} /etc/httpd/conf/ssl.key/server.key
 	done
 
+	# Ensure that the server-chain gets used, as it is off by
+	# default.
+	sed -i -e 's/^#SSLCertificateChainFile /SSLCertificateChainFile /' \
+	    /etc/httpd/conf.d/ssl.conf
+
 	result "$MESSAGE"
 	;;
 esac