Bug 58621 - HTTP APR connector does not supply certificate chain
Summary: HTTP APR connector does not supply certificate chain
Status: CLOSED FIXED
Alias: None
Product: Tomcat 9
Classification: Unclassified
Component: Connectors (show other bugs)
Version: 9.0.0.M1
Hardware: All All
: P2 normal (vote)
Target Milestone: -----
Assignee: Tomcat Developers Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-11-17 20:15 UTC by Mark Thomas
Modified: 2015-11-20 19:22 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Thomas 2015-11-17 20:15:08 UTC 
If a PEM file is provided containing the certificate and the associated chain the server only presents the final certificate in the chain.

The option to provide the chain appears to have been removed and needs to be restored.
Comment 1 Remy Maucherat 2015-11-20 14:17:56 UTC 
Restoring the property worked for me (tested with the test cert and a chain with APR and OpenSSL).
Comment 2 Ognjen Blagojevic 2015-11-20 19:22:04 UTC 
I rechecked with my certificate and it returns the full chain. I'm closing this issue.