Changeset 36534 in project

Timestamp:

09/06/18 22:10:04 (8 months ago)

Author:

wasamasa

Message:

use macports’ curl’ ca bundle on macosx (Kooda)

File:

• release/5/openssl/trunk/openssl.scm (modified) (3 diffs)

release/5/openssl/trunk/openssl.scm

@@ -28 +28 @@
    ssl-peer-verified?
    ssl-peer-subject-name ssl-peer-issuer-name
+   ssl-default-certificate-authorities
    ssl-default-certificate-authority-directory
    ssl-make-i/o-ports
@@ -879 +880 @@
 ;;; wrappers with secure defaults
 
+(define ssl-default-certificate-authorities
+  (make-parameter
+   (cond-expand
+    (macosx "/opt/local/etc/openssl/cert.pem")
+    (else #f))))
+
 (define ssl-default-certificate-authority-directory
   (make-parameter
@@ -887 +894 @@
 (define (ssl-make-client-context* #!key (protocol 'tlsv12) (cipher-list "DEFAULT") certificate private-key (private-key-type 'rsa) private-key-asn1? certificate-authorities certificate-authority-directory (verify? #t))
   (unless (or certificate-authorities certificate-authority-directory)
-    (set! certificate-authority-directory (ssl-default-certificate-authority-directory)))
+    (set! certificate-authority-directory (ssl-default-certificate-authority-directory))
+    (set! certificate-authorities (ssl-default-certificate-authorities)))
   (let ((ctx (ssl-make-client-context protocol)))
     (ssl-set-cipher-list! ctx cipher-list)