From 425e2dff0e4013edac6663a34a6359c98f4e8477 Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Fri, 30 Jun 2017 09:46:29 +0200 Subject: Don't read CaInfo if not specified (missing else) This fixes a regression from ~alpha2. Closes: #866559 Gbp-Dch: Full --- methods/connect.cc | 1 + 1 file changed, 1 insertion(+) diff --git a/methods/connect.cc b/methods/connect.cc index 1a95e2597..47e9e15d4 100644 --- a/methods/connect.cc +++ b/methods/connect.cc @@ -668,6 +668,7 @@ bool UnwrapTLS(std::string Host, std::unique_ptr &Fd, ? "No certificates available. Try installing ca-certificates." : gnutls_strerror(err)); } + else { // CA location has been set, use the specified one instead gnutls_certificate_set_verify_flags(tlsFd->credentials, GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT); -- cgit v1.2.3