CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2016/08/13 07:05:51
Modified files:
lib/libtls : tls.c tls_config.c tls_internal.h
Log message:
Load CA, certificate and key files into memory when the appropriate
tls_config_set_*_file() function is called. This allows us to immediately
propagate useful error messages, play more nicely with privsep/pledge and
have a single code path. Instead of always loading the default CA when
tls_config_new() is called, defer and only load the default CA when
tls_configure() is invoked, if a CA has not already been specified.
ok beck@ bluhm@
