Set set_default_verify_paths for SSL. Fixes: #450

savonet · Apr 3, 2020 · fa898fa · fa898fa
1 parent b9a3497
commit fa898fa
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -4,6 +4,7 @@ Fixed:
 
 - Fixed errors when installing bash-completion files (#1095)
 - Fixed failures in `extract-replaygain` script.
+- Set set_default_verify_paths for SSL. (#450)
 
 1.4.1 (18-02-2020)
 =====

diff --git a/src/tools/https.ml b/src/tools/https.ml
@@ -15,6 +15,7 @@ struct
     (* TODO: add option.. *)
     Ssl.set_verify ctx [] (Some Ssl.client_verify_callback);
     Ssl.set_verify_depth ctx 3;
+    ignore (Ssl.set_default_verify_paths ctx);
     let socket = Ssl.open_connection_with_context ctx socketaddr in
     begin
       match bind_address with