diff options
| author | Anders Betts <anders.betts@gmail.com> | 2026-09-21 14:52:10 +0200 |
|---|---|---|
| committer | Anders Betts <anders.betts@gmail.com> | 2026-09-21 14:52:10 +0200 |
| commit | 1c6008869cbe9ad956f5ed56462637a1d35018e0 (patch) | |
| tree | 9c17409087d6980e0093dbef3174567c9a6d1767 /src/tax_table.c | |
| parent | 1c1515b335c78d82cb99a50aa9dfaa4c083e3d9c (diff) | |
| download | bokf-1c6008869cbe9ad956f5ed56462637a1d35018e0.tar.gz bokf-1c6008869cbe9ad956f5ed56462637a1d35018e0.zip | |
tls: load the system CA bundle explicitly under static OpenSSLv0.1.58
Diffstat (limited to 'src/tax_table.c')
| -rw-r--r-- | src/tax_table.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/tax_table.c b/src/tax_table.c index 1cf40c1..6405a70 100644 --- a/src/tax_table.c +++ b/src/tax_table.c @@ -18,6 +18,7 @@ #include <openssl/x509.h> #include "db.h" +#include "tls_ca.h" #include "version.h" #define TT_LINE_LEN 49 @@ -478,7 +479,7 @@ static int tt_get_once(const struct tt_url *u, struct buf *body, int *status, SSL_CTX_set_min_proto_version(ctx, TLS1_2_VERSION); SSL_CTX_set_options(ctx, SSL_OP_NO_COMPRESSION | SSL_OP_NO_RENEGOTIATION); SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL); - if (SSL_CTX_set_default_verify_paths(ctx) != 1) { + if (tls_load_default_cas(ctx) != 1) { set_err(err, "cannot load system CA certificates"); goto done; } |