D 2010-07-14T14:50:53
J comment Most\sinstallations\sof\sOpenSSL\scome\swith\sa\ssystem\swide\sdirectory\sof\sdefault\scertificate\sauthorities\sand\smost\sapplications\susing\sOpenSSL\smake\suse\sof\sthis\scertificate\sstore\sduring\sserver\scertificate\sverification,\swhich\sis\shandy\sbecause\sa\ssystem\sadministrator\sonly\shas\sto\smanage\sone\scentral\sstore\sof\sacceptable\scertificate\sauthorities.\r\n\r\nFossil\spresently\sdoesn't\suse\sthe\ssystem\swide\sCA\scertificate\sstore,\sbut\sI\sthink\sit\sshould\s:-)\sThe\snecessary\schange\sis\sonly\sone\sline\sof\scode:\r\n<verbatim>\r\nIndex:\ssrc/http_ssl.c\r\n===================================================================\r\n---\ssrc/http_ssl.c\r\n+++\ssrc/http_ssl.c\r\n@@\s-90,10\s+90,11\s@@\r\n\s\s\s\s\sSSL_library_init();\r\n\s\s\s\s\sSSL_load_error_strings();\r\n\s\s\s\s\sERR_load_BIO_strings();\r\n\s\s\s\s\sOpenSSL_add_all_algorithms();\r\n\s\s\s\s\ssslCtx\s=\sSSL_CTX_new(SSLv23_client_method());\r\n+\s\s\s\sX509_STORE_set_default_paths(SSL_CTX_get_cert_store(sslCtx));\r\n\s\s\s\s\ssslIsInit\s=\s1;\r\n\s\s\s}\r\n\s}\r\n\s\r\n\s/*\r\n</verbatim>
J foundin fb5f0c2580
J private_contact 911ecc80502632daad095cf04dac560d4ed25ad4
J severity Minor
J status Open
J title Client\sside\sverification\sof\sSSL\sserver\scertificates\sshould\suse\ssystem\swide\sdefault\sCAs
J type Feature_Request
K f696bc85f8b91d263f5bf4c5bbd261bd252c46a0
U anonymous
Z adf782fa3cc558380a5d4bfd940cd5f1