Resolving Issue #1202 by providing a certificate chain to ssl.wrap_socket

1 files changed, 5 insertions, 1 deletions

diff --git a/cherrypy/wsgiserver/ssl_builtin.py b/cherrypy/wsgiserver/ssl_builtin.py
index 2c74ad84..4827b424 100644
--- a/cherrypy/wsgiserver/ssl_builtin.py
+++ b/cherrypy/wsgiserver/ssl_builtin.py
@@ -33,6 +33,9 @@ class BuiltinSSLAdapter(wsgiserver.SSLAdapter):
 
     private_key = None
     """The filename of the server's private key file."""
+    
+    certificate_chain = None
+    """The filename of the certificate chain file."""
 
     def __init__(self, certificate, private_key, certificate_chain=None):
         if ssl is None:
@@ -51,7 +54,8 @@ class BuiltinSSLAdapter(wsgiserver.SSLAdapter):
             s = ssl.wrap_socket(sock, do_handshake_on_connect=True,
                                 server_side=True, certfile=self.certificate,
                                 keyfile=self.private_key,
-                                ssl_version=ssl.PROTOCOL_SSLv23)
+                                ssl_version=ssl.PROTOCOL_SSLv23,
+                                ca_certs=self.certificate_chain)
         except ssl.SSLError:
             e = sys.exc_info()[1]
             if e.errno == ssl.SSL_ERROR_EOF: