From a00157c59640cbc341e0d4110d4e853c3da20908 Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Sat, 30 Jan 2021 14:15:10 +0100 Subject: --version: print default cert paths, and document SSL_CERT_* in manpage When Gene Heskett was updating his OpenSSL on Debian oldstable, we figured that it might be helpful to print where OpenSSL goes look for the trusted certificate. Add this information. Also add documentation of OpenSSL's SSL_CERT_DIR/SSL_CERT_FILE environment variables. --- fetchmail.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'fetchmail.c') diff --git a/fetchmail.c b/fetchmail.c index 907a8bcb..e6ceb71a 100644 --- a/fetchmail.c +++ b/fetchmail.c @@ -1769,8 +1769,10 @@ static void dump_params (struct runctl *runp, } else { printf(GT_(" SSL server certificate checking disabled.\n")); } + printf(GT_(" SSL default trusted certificate file: %s\n"), get_default_cert_file()); if (ctl->sslcertfile != NULL) printf(GT_(" SSL trusted certificate file: %s\n"), ctl->sslcertfile); + printf(GT_(" SSL default trusted certificate directory: %s\n"), get_default_cert_path()); if (ctl->sslcertpath != NULL) printf(GT_(" SSL trusted certificate directory: %s\n"), ctl->sslcertpath); if (ctl->sslcommonname != NULL) -- cgit v1.2.3