]> granicus.if.org Git - curl/commit
nss: load CA certificates even with --insecure
authorKamil Dudka <kdudka@redhat.com>
Mon, 6 Mar 2017 15:20:33 +0000 (16:20 +0100)
committerKamil Dudka <kdudka@redhat.com>
Mon, 10 Apr 2017 11:44:52 +0000 (13:44 +0200)
commitd29e9de146a5d56aea07fad43b0572b3a44fd3db
tree8f75383a294398edbb3faf3db003cb8a6b200c2b
parent764ad34cad3a097efb7fc4dd2f579e8d324c9be8
nss: load CA certificates even with --insecure

... because they may include an intermediate certificate for a client
certificate and the intermediate certificate needs to be presented to
the server, no matter if we verify the peer or not.

Reported-by: thraidh
Closes #851
lib/vtls/nss.c