On 16/11/2015 22:51, Ognjen Blagojevic wrote: > Mark, > Chris, > > On 16.11.2015 17:15, Mark Thomas wrote: >>> Tomcat 8 docs lists APR Connector attribute "SSLCertificateChainFile" >>> [1]. Tomcat 9 docs, does not list such attribute (neither in "SSL >>> Support - SSLHostConfig", "SSL Support - Certificate" nor "SSL Support - >>> Connector - APR/Native (deprecated)"). I also check the class >>> SSLHostConfigCertificate, and couldn't find a field for the chain. >> >> You use the same attribute as for the cert. i.e. you provide the full >> chain rather than just the cert. > > Ok, my initial testing was with the attribute SSLCertificateChainFile, > which was deprecated. > > Now I tried to add chain to server certificate file, but it does not > work for me, either. I still get the warning that certificate chain is > incomplete. I tried those two configurations, both of them serve only > server cert:
OK. Looks like I've misunderstood something / messed something up. I've opened BZ 58621. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
