Use portable gnutls function to trust system certs
authorFrank Zschockelt <lm@freakysoft.de>
Wed, 10 Feb 2016 20:56:03 +0100
changeset 700 9d99e76c64fe
parent 699 7cb765b626a9
child 701 bbbe2d24eea4
Use portable gnutls function to trust system certs GnuTLS supports that function since 3.0.20.
loudmouth/lm-ssl-gnutls.c
--- a/loudmouth/lm-ssl-gnutls.c	Thu Feb 04 22:31:40 2016 +0100
+++ b/loudmouth/lm-ssl-gnutls.c	Wed Feb 10 20:56:03 2016 +0100
@@ -35,8 +35,6 @@
 
 #include <gnutls/x509.h>
 
-#define CA_PEM_FILE "/etc/ssl/certs/ca-certificates.crt"
-
 struct _LmSSL {
     LmSSLBase base;
 
@@ -189,9 +187,7 @@
 {
     gnutls_global_init ();
     gnutls_certificate_allocate_credentials (&ssl->gnutls_xcred);
-    gnutls_certificate_set_x509_trust_file(ssl->gnutls_xcred,
-                                           CA_PEM_FILE,
-                                           GNUTLS_X509_FMT_PEM);
+    gnutls_certificate_set_x509_system_trust(ssl->gnutls_xcred);
 }
 
 gboolean