https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193871

--- Comment #3 from John W. O'Brien <[email protected]> ---
The fundamental problem is that libfetch always sets the CA cert file
(defaulting to /usr/local/etc/ssl/cert.pem if it exists or to /etc/ssl/cert.pem
otherwise), and openssl will return from X509_STORE_load_location() upon
failure to load the CAfile before trying to register the CApath. I will propose
a patch shortly.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"

Reply via email to