Add SSLCertificateChainFile, pointing to the certificate file, to support intermediat...

diff --git a/debian/changelog b/debian/changelog
index c5b1333..d06551f 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+invirt-web (0.1.25) unstable; urgency=low
+
+  * Add SSLCertificateChainFile, pointing to the certificate file, to
+    support intermediate certs if they exist.
+
+ -- Geoffrey Thomas <geofft@mit.edu>  Sun, 24 Mar 2013 23:33:15 -0700
+

 invirt-web (0.1.24) unstable; urgency=low
 
   * Fix Gitweb's idea of the correct git push URL
 invirt-web (0.1.24) unstable; urgency=low
 
   * Fix Gitweb's idea of the correct git push URL

diff --git a/files/etc/apache2/sites-available/ssl.mako b/files/etc/apache2/sites-available/ssl.mako
index 526f52f..aa86cf0 100644 (file)
--- a/files/etc/apache2/sites-available/ssl.mako
+++ b/files/etc/apache2/sites-available/ssl.mako
@@ -42,6 +42,7 @@ ${caller.body()}
        SSLEngine on
 
        SSLCertificateFile ssl/server.crt
        SSLEngine on
 
        SSLCertificateFile ssl/server.crt

+       SSLCertificateChainFile ssl/server.crt

        SSLCertificateKeyFile ssl/server.key
        
        SSLCACertificateFile /etc/ssl/certs/mitCAclient.pem
        SSLCertificateKeyFile ssl/server.key
        
        SSLCACertificateFile /etc/ssl/certs/mitCAclient.pem