From f65a8c1e66f43b642d5d1709a933615aac62cebd Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Mon, 23 May 2016 18:13:16 +0100 Subject: [PATCH] Support -no-CAfile -no-CApath in ctx2 Reviewed-by: Viktor Dukhovni --- apps/s_server.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/apps/s_server.c b/apps/s_server.c index dd12475869..35baac91d9 100644 --- a/apps/s_server.c +++ b/apps/s_server.c @@ -1760,9 +1760,10 @@ int s_server_main(int argc, char *argv[]) if (async) SSL_CTX_set_mode(ctx2, SSL_MODE_ASYNC); - if ((!SSL_CTX_load_verify_locations(ctx2, CAfile, CApath)) || - (!SSL_CTX_set_default_verify_paths(ctx2))) { + if (!ctx_set_verify_locations(ctx2, CAfile, CApath, noCAfile, + noCApath)) { ERR_print_errors(bio_err); + goto end; } if (vpmtouched && !SSL_CTX_set1_param(ctx2, vpm)) { BIO_printf(bio_err, "Error setting verify params\n"); -- 2.25.1