summaryrefslogtreecommitdiff
path: root/tlscommon.c
diff options
context:
space:
mode:
authorFabian Mauchle <fabian.mauchle@switch.ch>2017-03-24 11:05:18 +0100
committerFabian Mauchle <fabian.mauchle@switch.ch>2017-03-24 11:14:37 +0100
commit402cc31039f9612519468b76645edca9c063984b (patch)
tree4a5634a9f6bac4694eb4dec2d0d9b302a35a0c7f /tlscommon.c
parent3d9be8431e7644e440c58b7132563db0ace0267b (diff)
create new cert_store before reloading CAs and CRLsradsecproxy-50
Diffstat (limited to 'tlscommon.c')
-rw-r--r--tlscommon.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/tlscommon.c b/tlscommon.c
index f71cc11..842b955 100644
--- a/tlscommon.c
+++ b/tlscommon.c
@@ -153,6 +153,7 @@ static int tlsaddcacrl(SSL_CTX *ctx, struct tls *conf) {
X509_STORE *x509_s;
unsigned long error;
+ SSL_CTX_set_cert_store(ctx, X509_STORE_new());
if (!SSL_CTX_load_verify_locations(ctx, conf->cacertfile, conf->cacertpath)) {
while ((error = ERR_get_error()))
debug(DBG_ERR, "SSL: %s", ERR_error_string(error, NULL));