projects
/
openssl.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
38d6e4b
)
Make sure using SSL_CERT_FILE actually works, and has priority over system defaults.
author
Richard Levitte
<levitte@openssl.org>
Thu, 5 Dec 2002 01:20:47 +0000
(
01:20
+0000)
committer
Richard Levitte
<levitte@openssl.org>
Thu, 5 Dec 2002 01:20:47 +0000
(
01:20
+0000)
PR: 376
crypto/x509/by_file.c
patch
|
blob
|
history
diff --git
a/crypto/x509/by_file.c
b/crypto/x509/by_file.c
index 92e00d2d7335ab711defac1294634ef94a45fe2c..d8731d4e514015be36541552eabc90e0a33e3694 100644
(file)
--- a/
crypto/x509/by_file.c
+++ b/
crypto/x509/by_file.c
@@
-100,18
+100,19
@@
static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl,
case X509_L_FILE_LOAD:
if (argl == X509_FILETYPE_DEFAULT)
{
case X509_L_FILE_LOAD:
if (argl == X509_FILETYPE_DEFAULT)
{
- ok = (X509_load_cert_crl_file(ctx,X509_get_default_cert_file(),
- X509_FILETYPE_PEM) != 0);
+ file = (char *)Getenv(X509_get_default_cert_file_env());
+ if (file)
+ ok = (X509_load_cert_crl_file(ctx,file,
+ X509_FILETYPE_PEM) != 0);
+
+ if (!ok)
+ ok = (X509_load_cert_crl_file(ctx,X509_get_default_cert_file(),
+ X509_FILETYPE_PEM) != 0);
+
if (!ok)
{
X509err(X509_F_BY_FILE_CTRL,X509_R_LOADING_DEFAULTS);
}
if (!ok)
{
X509err(X509_F_BY_FILE_CTRL,X509_R_LOADING_DEFAULTS);
}
- else
- {
- file=(char *)Getenv(X509_get_default_cert_file_env());
- ok = (X509_load_cert_crl_file(ctx,file,
- X509_FILETYPE_PEM) != 0);
- }
}
else
{
}
else
{