Commit 56c43604 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

if verifypeer is enabled but nether CAfile nor CApath is, then don't try 

to load "verify_locations"
parent 7438c378

lib/ssluse.c

+2 −1
Original line number Diff line number Diff line
@@ -739,7 +739,8 @@ Curl_SSLConnect(struct connectdata *conn) 
                       SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT|

                       SSL_VERIFY_CLIENT_ONCE,

                       cert_verify_callback);

    if (!SSL_CTX_load_verify_locations(conn->ssl.ctx,

    if ((data->set.ssl.CAfile || data->set.ssl.CApath) &&

        !SSL_CTX_load_verify_locations(conn->ssl.ctx,

                                       data->set.ssl.CAfile,

                                       data->set.ssl.CApath)) {

      failf(data,"error setting cerficate verify locations");