Attached is the same diff from a previous ticket [0]. This fixes some of
the ssl issues I have on OpenBSD where all certificates are untrusted.
If anyone still has issues after this patch, I have another one that goes
through SSL_get_peer_cert_chain and saves the CA and verifies against
that instead of the client cert this looks like what mutt does when it
can't verify a client cert.
[0] http://fossil-scm.org/index.html/tktview?name=f696bc85f8
Index: src/http_ssl.c
===================================================================
--- src/http_ssl.c
+++ src/http_ssl.c
@@ -90,10 +90,11 @@
SSL_library_init();
SSL_load_error_strings();
ERR_load_BIO_strings();
OpenSSL_add_all_algorithms();
sslCtx = SSL_CTX_new(SSLv23_client_method());
+ X509_STORE_set_default_paths(SSL_CTX_get_cert_store(sslCtx));
sslIsInit = 1;
}
}
/*
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
