uclient-fetch: only add default CA entries if no certificate was supplied and verify...

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

diff --git a/uclient-fetch.c b/uclient-fetch.c
index 914bdccdeb59c51e3c76a42e1d5eaf85eb9de8f9..8d03c3dc27c2ce3340e59ea5a99808b0f6d187b2 100644 (file)
--- a/uclient-fetch.c
+++ b/uclient-fetch.c
@@ -410,7 +410,7 @@ int main(int argc, char **argv)
                return 1;
        }
 
-       if (ssl_ctx)
+       if (ssl_ctx && default_certs)
                init_ca_cert();
 
        rc = init_request(cl);