diff options
| author | Anders Betts <anders.betts@gmail.com> | 2026-09-21 14:52:10 +0200 |
|---|---|---|
| committer | Anders Betts <anders.betts@gmail.com> | 2026-09-21 14:52:10 +0200 |
| commit | 1c6008869cbe9ad956f5ed56462637a1d35018e0 (patch) | |
| tree | 9c17409087d6980e0093dbef3174567c9a6d1767 /clients | |
| parent | 1c1515b335c78d82cb99a50aa9dfaa4c083e3d9c (diff) | |
| download | bokf-0.1.58.tar.gz bokf-0.1.58.zip | |
tls: load the system CA bundle explicitly under static OpenSSLv0.1.58
Diffstat (limited to 'clients')
| -rw-r--r-- | clients/client.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/clients/client.c b/clients/client.c index fd119f1..30f2a67 100644 --- a/clients/client.c +++ b/clients/client.c @@ -1,4 +1,5 @@ #include "client.h" +#include "tls_ca.h" #include <arpa/inet.h> #include <errno.h> @@ -126,7 +127,7 @@ static int tls_connect_addr(const char *addrport, struct client_conn *out) } SSL_CTX_set_min_proto_version(ctx, TLS1_2_VERSION); SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL); - SSL_CTX_set_default_verify_paths(ctx); + tls_load_default_cas(ctx); const char *ca = getenv("BOKFD_TLS_CA"); if (ca && *ca && SSL_CTX_load_verify_locations(ctx, ca, NULL) != 1) { set_tls_error("TLS CA file"); |