Use portable gnutls function to trust system certs
GnuTLS supports that function since 3.0.20.
--- a/loudmouth/lm-ssl-gnutls.c Thu Feb 04 22:31:40 2016 +0100
+++ b/loudmouth/lm-ssl-gnutls.c Wed Feb 10 20:56:03 2016 +0100
@@ -35,8 +35,6 @@
#include <gnutls/x509.h>
-#define CA_PEM_FILE "/etc/ssl/certs/ca-certificates.crt"
-
struct _LmSSL {
LmSSLBase base;
@@ -189,9 +187,7 @@
{
gnutls_global_init ();
gnutls_certificate_allocate_credentials (&ssl->gnutls_xcred);
- gnutls_certificate_set_x509_trust_file(ssl->gnutls_xcred,
- CA_PEM_FILE,
- GNUTLS_X509_FMT_PEM);
+ gnutls_certificate_set_x509_system_trust(ssl->gnutls_xcred);
}
gboolean