Page Menu
Home
FreeBSD
Search
Configure Global Search
Log In
Files
F145820139
D42059.diff
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Flag For Later
Award Token
Size
827 B
Referenced Files
None
Subscribers
None
D42059.diff
View Options
diff --git a/lib/libfetch/common.c b/lib/libfetch/common.c
--- a/lib/libfetch/common.c
+++ b/lib/libfetch/common.c
@@ -1055,8 +1055,6 @@
/*
* Configure peer verification based on environment.
*/
-#define LOCAL_CERT_FILE _PATH_LOCALBASE "/etc/ssl/cert.pem"
-#define BASE_CERT_FILE "/etc/ssl/cert.pem"
static int
fetch_ssl_setup_peer_verification(SSL_CTX *ctx, int verbose)
{
@@ -1066,12 +1064,6 @@
if (getenv("SSL_NO_VERIFY_PEER") == NULL) {
ca_cert_file = getenv("SSL_CA_CERT_FILE");
- if (ca_cert_file == NULL &&
- access(LOCAL_CERT_FILE, R_OK) == 0)
- ca_cert_file = LOCAL_CERT_FILE;
- if (ca_cert_file == NULL &&
- access(BASE_CERT_FILE, R_OK) == 0)
- ca_cert_file = BASE_CERT_FILE;
ca_cert_path = getenv("SSL_CA_CERT_PATH");
if (verbose) {
fetch_info("Peer verification enabled");
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Wed, Feb 25, 10:00 PM (20 h, 17 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
28996160
Default Alt Text
D42059.diff (827 B)
Attached To
Mode
D42059: libfetch: don't rely on ca_root_nss for certificate validation
Attached
Detach File
Event Timeline
Log In to Comment