#include "config.h"
#include "fetchmail.h"

#ifdef SSL_ENABLE
#include <stdlib.h>
#include <string.h>
#include <openssl/x509.h>

/** return a constant copy of the default SSL certificate path, i. e.
 * the directory with hashed certificates, see SSL_CTX_load_verify_locations(3).
 * Return value not to be modified by caller. */
const char *get_default_cert_path(void) {
	const char *rb = (char *)0, *tmp;

	tmp = X509_get_default_cert_dir_env();
	if (tmp) rb = getenv(tmp);
	if (!rb) rb = X509_get_default_cert_dir();

	return rb;
}

/** return a constant copy of the default SSL certificate file
 * with a concatenation of all trusted certificates,
 * the so-called certificate bundle. See SSL_CTX_load_verify_locations(3),
 * Return value not to be modified by caller. */
const char *get_default_cert_file(void) {
	const char *rb =