Commit eb0b3acb authored by Kamil Dudka's avatar Kamil Dudka
Browse files

nss: try to connect even if libnssckbi.so fails to load 

One can still use CA certificates stored in NSS database.

Reported-by: Maxime Legros
Bug: https://curl.haxx.se/mail/lib-2018-09/0077.html

Closes #3016
parent 522e647c

lib/vtls/nss.c

+3 −2
Original line number Diff line number Diff line
@@ -1578,8 +1578,9 @@ static CURLcode nss_load_ca_certificates(struct connectdata *conn, 
    infof(data, "%s %s\n", (result) ? "failed to load" : "loaded",

          trust_library);

    if(result == CURLE_FAILED_INIT)

      /* make the error non-fatal if we are not going to verify peer */

      result = CURLE_SSL_CACERT_BADFILE;

      /* If libnssckbi.so is not available (or fails to load), one can still

         use CA certificates stored in NSS database.  Ignore the failure. */

      result = CURLE_OK;

  }

  else if(!use_trust_module && trust_module) {

    /* libnssckbi.so not needed but already loaded --> unload it! */