From 31af0dafba6d3769d2a39617c0dddedb97883712 Mon Sep 17 00:00:00 2001
From: Stephen Touset <stephen@squareup.com>
Date: Fri, 18 Apr 2014 13:42:02 -0700
Subject: [PATCH] Expose SSLContext#extra_chain_cert in Net::HTTP

Currently, Net::HTTP can only send a single SSL certificate when it
establishes a connection. Some use-cases involve sending an entire
certificate chain to the destination; for this, SSLContext supports
assigning to #extra_chain_cert=.

This adds support in Net::HTTP for exposing this underlying SSLContext
property to end-users. [Feature #9758]
---
 lib/net/http.rb | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/net/http.rb b/lib/net/http.rb
index 59b6d909bb..ffce1a0784 100644
--- a/lib/net/http.rb
+++ b/lib/net/http.rb
@@ -850,6 +850,7 @@ module Net   #:nodoc:
       :@cert,
       :@cert_store,
       :@ciphers,
+      :@extra_chain_cert,
       :@key,
       :@ssl_timeout,
       :@ssl_version,
@@ -866,6 +867,7 @@ module Net   #:nodoc:
       :cert,
       :cert_store,
       :ciphers,
+      :extra_chain_cert
       :key,
       :ssl_timeout,
       :ssl_version,
@@ -896,6 +898,10 @@ module Net   #:nodoc:
     # Sets the available ciphers.  See OpenSSL::SSL::SSLContext#ciphers=
     attr_accessor :ciphers
 
+    # Sets the extra X509 certificates to be added to the certificate chain.
+    # See OpenSSL::SSL::SSLContext#extra_chain_cert=
+    attr_accessor :extra_chain_cert
+
     # Sets an OpenSSL::PKey::RSA or OpenSSL::PKey::DSA object.
     # (This method is appeared in Michal Rokos's OpenSSL extension.)
     attr_accessor :key