Add --sslcertfile option and FETCHMAIL_NO_DEFAULT_X509_PATHS env var,

and always load the default X.509 trust stores, unless the latter is set.

1 files changed, 2 insertions, 1 deletions

diff --git a/driver.c b/driver.c
index 32cfffb1..68a388d1 100644
--- a/driver.c
+++ b/driver.c
@@ -1109,7 +1109,8 @@ static int do_session(
 	/* perform initial SSL handshake on open connection */
 	if (ctl->use_ssl &&
 		SSLOpen(mailserver_socket, ctl->sslcert, ctl->sslkey,
-		    ctl->sslproto, ctl->sslcertck, ctl->sslcertpath,
+		    ctl->sslproto, ctl->sslcertck,
+		    ctl->sslcertfile, ctl->sslcertpath,
 		    ctl->sslfingerprint, ctl->sslcommonname ?
 		    ctl->sslcommonname : realhost, ctl->server.pollname,
 		    &ctl->remotename) == -1)