SSL Chain Certificates support

Report & discuss bugs found in SABnzbd
Forum rules
Help us help you:
  • Are you using the latest stable version of SABnzbd? Downloads page.
  • Tell us what system you run SABnzbd on.
  • Adhere to the forum rules.
  • Do you experience problems during downloading?
    Check your connection in Status and Interface settings window.
    Use Test Server in Config > Servers.
    We will probably ask you to do a test using only basic settings.
  • Do you experience problems during repair or unpacking?
    Enable +Debug logging in the Status and Interface settings window and share the relevant parts of the log here using [ code ] sections.
Post Reply
starheart
Newbie
Newbie
Posts: 9
Joined: December 7th, 2009, 2:12 am

SSL Chain Certificates support

Post by starheart »

I just renewed my SSL certificates today, and went with the cheapest I could find. The new certifcates are chained, and I am not about to spend even more money on new certificates. I am surprised this support isn't already there.

I found another thread talking about Cherrypy having the support, but SABnzbd not having it. So I have made a basic patch for SABnzbd 0.7.3 that works for me. For the chain file I took the ca-bundle.crt file from my distributation, in this case CentOS, and copied it. Then I appended the chain file from my SSL certificate provider. I then added the line to my sabnzbd.ini.

Patch:
http://proton.cygnusx-1.org/~edgan/SABn ... hain.patch

Config file change:
https_chain = /etc/pki/tls/certs/ca-bundle-intermediate.crt
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: SSL Chain Certificates support

Post by shypike »

Nice work, thank you.
I knew it was possible, but I just didn't have enough time and priority to work it out.
I'll see whether I can get this into 0.7.4.
BTW: the link times out for me, could you email the patch to bugs@sabnzbd.org ?
starheart
Newbie
Newbie
Posts: 9
Joined: December 7th, 2009, 2:12 am

Re: SSL Chain Certificates support

Post by starheart »

My UPS decided to die last night. I have removed it, and so the link works again. I am also e-mailing you the patch.
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: SSL Chain Certificates support

Post by shypike »

I integrated your patch, so thanks again.
Now for the interesting part.
Could you write a text explaining how to set this up, for the Wiki manual?
Post Reply