File libeXosip2-sslverifypaths.patch of Package libeXosip2
Index: src/eXtl_tls.c
===================================================================
--- src/eXtl_tls.c.orig
+++ src/eXtl_tls.c
@@ -1213,8 +1213,11 @@ initialize_client_ctx (struct eXosip_t *
OSIP_TRACE (osip_trace (__FILE__, __LINE__, OSIP_INFO3, NULL, "eXosip: Trusted CA %s : '%s'\n", caFolder ? "folder" : "file", client_ctx->root_ca_cert));
- if (!(SSL_CTX_load_verify_locations (ctx, caFile, caFolder)))
+ if (!(SSL_CTX_load_verify_locations (ctx, caFile, caFolder))) {
OSIP_TRACE (osip_trace (__FILE__, __LINE__, OSIP_ERROR, NULL, "eXosip: Couldn't read CA list ('%s')\n", client_ctx->root_ca_cert));
+ /* fallback to whatever the system has */
+ SSL_CTX_set_default_verify_paths(ctx);
+ }
{
int verify_mode = SSL_VERIFY_NONE;