Page 1 of 1

SSL Chain Certificates support

Posted: August 17th, 2012, 1:51 am
by starheart
I just renewed my SSL certificates today, and went with the cheapest I could find. The new certifcates are chained, and I am not about to spend even more money on new certificates. I am surprised this support isn't already there.

I found another thread talking about Cherrypy having the support, but SABnzbd not having it. So I have made a basic patch for SABnzbd 0.7.3 that works for me. For the chain file I took the ca-bundle.crt file from my distributation, in this case CentOS, and copied it. Then I appended the chain file from my SSL certificate provider. I then added the line to my sabnzbd.ini.

Patch:
http://proton.cygnusx-1.org/~edgan/SABn ... hain.patch

Config file change:
https_chain = /etc/pki/tls/certs/ca-bundle-intermediate.crt

Re: SSL Chain Certificates support

Posted: August 17th, 2012, 8:35 am
by shypike
Nice work, thank you.
I knew it was possible, but I just didn't have enough time and priority to work it out.
I'll see whether I can get this into 0.7.4.
BTW: the link times out for me, could you email the patch to bugs@sabnzbd.org ?

Re: SSL Chain Certificates support

Posted: August 17th, 2012, 11:34 am
by starheart
My UPS decided to die last night. I have removed it, and so the link works again. I am also e-mailing you the patch.

Re: SSL Chain Certificates support

Posted: August 18th, 2012, 7:32 am
by shypike
I integrated your patch, so thanks again.
Now for the interesting part.
Could you write a text explaining how to set this up, for the Wiki manual?