OpenVPN, extract ca chain for #1487

opnsense · Feb 13, 2019 · 67f4948 · 67f4948
1 parent 2006837
commit 67f4948
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/etc/inc/plugins.inc.d/openvpn.inc b/src/etc/inc/plugins.inc.d/openvpn.inc
@@ -892,8 +892,8 @@ function openvpn_reconfigure($mode, $settings, $device_only = false)
         case 'server_tls':
         case 'server_tls_user':
         case 'server_user':
-            $ca = lookup_ca($settings['caref']);
-            openvpn_add_keyfile($ca['crt'], $conf, $mode_id, "ca");
+            $ca = base64_encode(ca_chain($settings));
+            openvpn_add_keyfile($ca, $conf, $mode_id, "ca");
 
             if (!empty($settings['certref'])) {
                 $cert = lookup_cert($settings['certref']);