From 3f07f9b652e6640726555dcb7349adafea4fcab7 Mon Sep 17 00:00:00 2001 From: Alexander Barton Date: Fri, 16 Nov 2012 12:54:23 +0100 Subject: [PATCH 4/4] SSL/TLS: Don't initialize CA when no CA file is configured --- src/ngircd/conn-ssl.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/ngircd/conn-ssl.c b/src/ngircd/conn-ssl.c index bab322e..fbe380c 100644 --- a/src/ngircd/conn-ssl.c +++ b/src/ngircd/conn-ssl.c @@ -501,7 +501,8 @@ ConnSSL_SetVerifyProperties_openssl(SSL_CTX * ctx) if (!Conf_SSLOptions.CAFile) return true; - if (SSL_CTX_load_verify_locations(ctx, Conf_SSLOptions.CAFile, NULL) != 1) { + if (Conf_SSLOptions.CAFile && Conf_SSLOptions.CAFile[0] && + SSL_CTX_load_verify_locations(ctx, Conf_SSLOptions.CAFile, NULL) != 1) { LogOpenSSLError("SSL_CTX_load_verify_locations", NULL); goto out; } -- 1.7.10.2 (Apple Git-33)