elli-lib / elli

Simple, robust and performant Erlang web server
https://github.com/elli-lib/elli/blob/develop/doc/README.md
MIT License
324 stars 38 forks source link

ellie (or erlang ssl) not sending intermediate certs - breaks the ssl chain. #104

Closed CharlesOkwuagwu closed 3 years ago

CharlesOkwuagwu commented 3 years ago

I have setup a very simple Elli ssl server here: https://paperlesssolutionsltd.com.ng:333

via https://www.sslshopper.com/ssl-checker.html#hostname=https://paperlesssolutionsltd.com.ng:333 I can see that the ssl chain is broken:

image

Please what am i missing in my setup?

def start_link(args) do
    :elli.start_link(
      port: 333,
      certfile: Application.app_dir(@app, "priv/cert.pem"),
      keyfile: Application.app_dir(@app, "priv/cert.key"),
      ssl: true,
      callback: __MODULE__,
      callback_args: args,
      max_body_size: 1_073_741_824
    )
end
CharlesOkwuagwu commented 3 years ago

was an issue with the Erlang version. Upgrading to 23.2.4 solved it

https://elixirforum.com/t/making-ssl-tests-all-pass-for-phoenix-lets-encrypt/3507/30?u=charleso

tsloughter commented 3 years ago

Oh, good :)