From 67f49486708770633ca615ee41f53439e0a962ce Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Wed, 13 Feb 2019 11:19:13 +0100 Subject: [PATCH] OpenVPN, extract ca chain for https://github.com/opnsense/core/issues/1487 --- src/etc/inc/plugins.inc.d/openvpn.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/etc/inc/plugins.inc.d/openvpn.inc b/src/etc/inc/plugins.inc.d/openvpn.inc index 8db33e1e2..096d815e2 100644 --- a/src/etc/inc/plugins.inc.d/openvpn.inc +++ b/src/etc/inc/plugins.inc.d/openvpn.inc @@ -892,8 +892,8 @@ function openvpn_reconfigure($mode, $settings, $device_only = false) case 'server_tls': case 'server_tls_user': case 'server_user': - $ca = lookup_ca($settings['caref']); - openvpn_add_keyfile($ca['crt'], $conf, $mode_id, "ca"); + $ca = base64_encode(ca_chain($settings)); + openvpn_add_keyfile($ca, $conf, $mode_id, "ca"); if (!empty($settings['certref'])) { $cert = lookup_cert($settings['certref']);