From cc3eb9cd7198bc7a5ca4f0ce168d3a96ccfaa9e2 Mon Sep 17 00:00:00 2001
From: Serris Lew <lserris@apple.com>
Date: Sat, 3 Dec 2022 00:21:42 -0800
Subject: [PATCH] Fail out when intermediate certificate chain fails to load

---
 iocore/net/SSLUtils.cc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/iocore/net/SSLUtils.cc b/iocore/net/SSLUtils.cc
index 22f170ce8ca..4544136df6f 100644
--- a/iocore/net/SSLUtils.cc
+++ b/iocore/net/SSLUtils.cc
@@ -2445,6 +2445,8 @@ SSLMultiCertConfigLoader::load_certs(SSL_CTX *ctx, const std::vector<std::string
     // Load up any additional chain certificates
     if (!SSL_CTX_add_extra_chain_cert_bio(ctx, bio.get())) {
       Debug("ssl", "couldn't add chain to %p", ctx);
+      SSLError("failed to load intermediate certificate chain from %s", cert_names_list[i].c_str());
+      return false;
     }
 
     if (secret_key_data.empty()) {