ssl_trusted_certificate should point to chain.pem if we're demonstrating LetsEncrypt...
authorHorsemans <horsemans@horsemans.online>
Sun, 31 Mar 2019 16:58:28 +0000 (16:58 +0000)
committerHorsemans <horsemans@horsemans.online>
Sun, 31 Mar 2019 16:58:28 +0000 (16:58 +0000)
installation/pleroma.nginx

index a24bb0e61fe7bf4dff98efb86f9de978435ac828..a0e91f464109288f54b6dfdc701c2263b8e0881f 100644 (file)
@@ -31,7 +31,7 @@ server {
     listen 443 ssl http2;
     ssl_session_timeout 5m;
 
-    ssl_trusted_certificate   /etc/letsencrypt/live/example.tld/fullchain.pem;
+    ssl_trusted_certificate   /etc/letsencrypt/live/example.tld/chain.pem;
     ssl_certificate           /etc/letsencrypt/live/example.tld/fullchain.pem;
     ssl_certificate_key       /etc/letsencrypt/live/example.tld/privkey.pem;