Remove/update deprecated OpenSSL functions, change certificate PEM loading to allow loading a chain rather than just a single certificate.

1 files changed, 4 insertions, 2 deletions

diff --git a/config.c b/config.c
index 2a8db43..2bfb38c 100644
--- a/config.c
+++ b/config.c
@@ -398,11 +398,13 @@ int createconfigfile(char *filename) {
   "# Things such as the logs directory will be placed below this\n"
   "#basedir = \"/home/foo/.blabouncer/\"\n"
   "\n"
-  "# Certificate file (defaults to <basedir>/cert.pem)\n"
+  "# Certificate chain PEM file (defaults to <basedir>/cert.pem)\n"
+  "# Can contain either a single certificate, or a chain of certificates starting with the subject and\n"
+  "# ending with the root issuer\n"
   "# If clienttls = \"0\" then this need not be set\n"
   "#certfile = \"/home/foo/.blabouncer/cert.pem\"\n"
   "\n"
-  "# Certificate key file (defaults to <basedir>/key.pem)\n"
+  "# Private key PEM file (defaults to <basedir>/key.pem)\n"
   "# If clienttls = \"0\" then this need not be set\n"
   "#keyfile = \"/home/foo/.blabouncer/key.pem\"\n"
   "\n"