Changeset af5764e for conf.c

Timestamp:

2011-12-19T17:23:28Z (12 years ago)

Author:

Wilmer van der Gaast <wilmer@…>

Branches:

master

Children:

25b05b7

Parents:

78b8401

Message:

Refuse to start if cafile points at an unreadable file, to avoid silent
cert verification failures.

File:

• conf.c (modified) (1 diff)

conf.c

@@ -178 +178 @@
                 fprintf( stderr, "Warning: Unable to read configuration file `%s'.\n", global.conf_file );
         
+        if( conf->cafile && access( conf->cafile, R_OK ) != 0 )
+        {
+                /* Let's treat this as a serious problem so people won't think
+                   they're secure when in fact they're not. */
+                fprintf( stderr, "Error: Could not read CA file %s: %s\n", conf->cafile, strerror( errno ) );
+                return NULL;
+        }
+        
         return conf;
 }