I was able to solve this problem by writing following class. Thank you JP for
pointing me to use_certificate_chain_file function.
class ChainedOpenSSLContextFactory(DefaultOpenSSLContextFactory):
def __init__(self, privateKeyFileName, certificateChainFileName,
sslmethod=SSL.S
what i recommend is to add all chain in one file using openssl kit
(maybe just cat'ing works). However, most certs issued nowadays
contain the chain already in. You can check with openssl x509 -in
cert.pem -text and see the attached signers cerificate in base64, copy
that to a new.pem and repeat. Y
On 07:13 am, ss...@nextdigital.com wrote:
>Hi There,
>
>Does Twisted support or is there any way of loading intermediate CA
>certs from a chain file?
Twisted uses pyOpenSSL for it's SSL support. So you can do pretty much
anything pyOpenSSL allows. http://packages.python.org/pyOpenSSL
/openssl
