Commit 4ba8cabf authored by Richard Levitte's avatar Richard Levitte
Browse files

SSL_CERT_FILE should be used in place of the system default file, not as 

a first alternative to try
parent f68bb3c5

crypto/x509/by_file.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -105,7 +105,7 @@ static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl, 
				ok = (X509_load_cert_crl_file(ctx,file,

				ok = (X509_load_cert_crl_file(ctx,file,

					      X509_FILETYPE_PEM) != 0);

					      X509_FILETYPE_PEM) != 0);





			if (!ok)

			else

				ok = (X509_load_cert_crl_file(ctx,X509_get_default_cert_file(),

				ok = (X509_load_cert_crl_file(ctx,X509_get_default_cert_file(),

					      X509_FILETYPE_PEM) != 0);

					      X509_FILETYPE_PEM) != 0);