It seems to me that the behaviour of the s_server has changed in 0.9.8 concerning the interpretation of the nocert parameter.
When nocert is specified or when no appropriate alga was
compiled with, the variables for the key/cert file names were set to
NULL loading the files before any attempt was made to load them.
In 0.9.8 there is ney code to initialize the primary and secondary key
files which is added before the nocert treatment, thus it is
impossible to run with the -nocert option.
IMO the code to initialize the files should be replaced BEHIND the
nocert treatment and modified along the following lines:
current is like:
s_key = load_key( ...)
if (!skey) {
error ..
}
and should be IMO
if (!nocert && !(skey = load( ..))) {
error
}
similar for the s-cert file.
I can provide a patch if my analysis is correct.
regards
Peter
--
To verify the signature, see http://edelpki.edelweb.fr/
Cela vous permet de charger le certificat de l'autorité;
die Liste mit zurückgerufenen Zertifikaten finden Sie da auch.
smime.p7s
Description: S/MIME Cryptographic Signature
