Actually set default SSL certificate path if --sslcertpath is unset.

Reported by Heino Tiedemann and Rob MacGregor.

svn path=/branches/BRANCH_6-3/; revision=4516

2 files changed, 4 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index cd0f1cec..32e628c3 100644
--- a/NEWS
+++ b/NEWS
@@ -12,6 +12,8 @@ fetchmail 6.3.1 (not yet released):
 * Fix broken default port in POP2. Patch by Stanislav Brabec, SUSE [CZ]. (MA)
 * Fix manual page, some lines starting with ' were escaped by \&. (MA)
 * Ship with gettext-0.14.3 again, as 6.2.9-rc10 did. Found by Sunil Shetye. (MA)
+* Actually set default SSL certificate path if --sslcertpath is unset.
+  Reported by Heino Tiedemann and Rob MacGregor. (MA)
 
 fetchmail 6.3.0 (released 2005-11-30):
 
diff --git a/socket.c b/socket.c
index 6fade9dd..dbd8ce14 100644
--- a/socket.c
+++ b/socket.c
@@ -841,6 +841,8 @@ int SSLOpen(int sock, char *mycert, char *mykey, char *myproto, int certck, char
 	}
 	if (certpath)
 		SSL_CTX_load_verify_locations(_ctx, NULL, certpath);
+	else
+		SSL_CTX_set_default_verify_paths(_ctx);
 	
 	_ssl_context[sock] = SSL_new(_ctx);