tls: load the system CA bundle explicitly under static OpenSSLv0.1.58

1 files changed, 2 insertions, 1 deletions

diff --git a/src/smtp.c b/src/smtp.c
index 6a90424..18834fa 100644
--- a/src/smtp.c
+++ b/src/smtp.c
@@ -18,6 +18,7 @@
 #include <openssl/ssl.h>
 #include <openssl/x509.h>
 
+#include "tls_ca.h"
 #include "util.h"
 
 #define SMTP_TIMEOUT_SEC 30
@@ -345,7 +346,7 @@ static int tls_start(struct smtp_conn *c, const char *host, char *err,
     SSL_CTX_set_options(c->ctx, SSL_OP_NO_COMPRESSION |
                                     SSL_OP_NO_RENEGOTIATION);
     SSL_CTX_set_verify(c->ctx, SSL_VERIFY_PEER, NULL);
-    if (SSL_CTX_set_default_verify_paths(c->ctx) != 1) {
+    if (tls_load_default_cas(c->ctx) != 1) {
         set_err(err, errlen, "smtp: cannot load system CA certificates");
         return -1;
     }