summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authoreric <eric@openbsd.org>2013-11-21 08:36:51 +0000
committereric <eric@openbsd.org>2013-11-21 08:36:51 +0000
commitdbd23988144e94800ef1b10ed7201aa7de41faf2 (patch)
treec5076cac4072d100930a30e61cd73feee11206ff
parentcorrectly handle EAGAIN and closed pipe in msgbuf_write() (diff)
downloadwireguard-openbsd-dbd23988144e94800ef1b10ed7201aa7de41faf2.tar.xz
wireguard-openbsd-dbd23988144e94800ef1b10ed7201aa7de41faf2.zip
fail if lka can't load cert file
-rw-r--r--usr.sbin/smtpd/ca.c7
1 files changed, 5 insertions, 2 deletions
diff --git a/usr.sbin/smtpd/ca.c b/usr.sbin/smtpd/ca.c
index 0b643832693..32fb84c00c5 100644
--- a/usr.sbin/smtpd/ca.c
+++ b/usr.sbin/smtpd/ca.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ca.c,v 1.2 2013/10/28 17:02:08 eric Exp $ */
+/* $OpenBSD: ca.c,v 1.3 2013/11/21 08:36:51 eric Exp $ */
/*
* Copyright (c) 2012 Gilles Chehade <gilles@poolp.org>
@@ -60,7 +60,10 @@ ca_X509_verify(X509 *certificate, STACK_OF(X509) *chain, const char *CAfile,
if ((store = X509_STORE_new()) == NULL)
goto end;
- X509_STORE_load_locations(store, CAfile, NULL);
+ if (! X509_STORE_load_locations(store, CAfile, NULL)) {
+ log_warn("warn: unable to load CA file %s", CAfile);
+ goto end;
+ }
X509_STORE_set_default_paths(store);
if ((xsc = X509_STORE_CTX_new()) == NULL)