From 61a2c61568817a54422e52a1fe242b8ee1857920 Mon Sep 17 00:00:00 2001
From: Adam Dickmeiss <adam@indexdata.dk>
Date: Fri, 9 Jun 2006 12:40:53 +0000
Subject: [PATCH] SSL comstack uses SL_CTX_use_certificate_chain_file rather
 than SL_CTX_use_certificate_file. See
 http://lists.indexdata.dk/pipermail/yazlist/2006-June/001615.html

---
 NEWS        |    5 +++++
 src/tcpip.c |    5 ++---
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/NEWS b/NEWS
index 1813a1e..8a90459 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,8 @@
+SSL comstack uses SL_CTX_use_certificate_chain_file rather than
+SL_CTX_use_certificate_file. See
+http://lists.indexdata.dk/pipermail/yazlist/2006-June/001615.html
+for more info. Thanks to Ko van der Sloot.
+
 --- 2.1.20 2006/06/02
 
 Bug #600: SRU GET, POST support for yaz-client. Introduced
diff --git a/src/tcpip.c b/src/tcpip.c
index 6400e7d..02353c9 100644
--- a/src/tcpip.c
+++ b/src/tcpip.c
@@ -2,7 +2,7 @@
  * Copyright (C) 1995-2005, Index Data ApS
  * See the file LICENSE for details.
  *
- * $Id: tcpip.c,v 1.17 2005-07-19 12:40:52 mike Exp $
+ * $Id: tcpip.c,v 1.18 2006-06-09 12:40:53 adam Exp $
  */
 /**
  * \file tcpip.c
@@ -490,8 +490,7 @@ static int tcpip_bind(COMSTACK h, void *address, int mode)
         if (sp->ctx_alloc)
         {
             int res;
-            res = SSL_CTX_use_certificate_file (sp->ctx, sp->cert_fname,
-                                                SSL_FILETYPE_PEM);
+            res = SSL_CTX_use_certificate_chain_file(sp->ctx, sp->cert_fname);
             if (res <= 0)
             {
                 ERR_print_errors_fp(stderr);
-- 
1.7.10.4