Remove extra certificates

1 files changed, 3 insertions, 7 deletions

diff --git a/libressl.patch b/libressl.patch
index 0322ddd..28d46a3 100644
--- a/libressl.patch
+++ b/libressl.patch
@@ -102,7 +102,7 @@ index 9f1dd67ec..60e1afe99 100644
  static void tls_xwrite(tls_state_t *tls, int len)
  {
 diff --git a/networking/wget.c b/networking/wget.c
-index 6a64836fb..f859f429a 100644
+index 6a64836fb..490daf001 100644
 --- a/networking/wget.c
 +++ b/networking/wget.c
 @@ -1,4 +1,3 @@
@@ -250,7 +250,7 @@ index 6a64836fb..f859f429a 100644
  #endif
  
  #if ENABLE_FEATURE_WGET_HTTPS
-@@ -1230,26 +1276,51 @@ static void download_one_url(const char *url)
+@@ -1230,26 +1276,47 @@ static void download_one_url(const char *url)
                 /* Open socket to http(s) server */
  #if ENABLE_FEATURE_WGET_OPENSSL
                 /* openssl (and maybe internal TLS) support is configured */
@@ -278,10 +278,6 @@ index 6a64836fb..f859f429a 100644
 +                       config = tls_config_new();
 +                       if(config == NULL)
 +                               bb_error_msg_and_die("Out of memory 2");
-+                       if(tls_config_set_ca_path(config, "certs") != 0)
-+                               bb_error_msg_and_die("Failed to set ca path");
-+                       if(tls_config_set_ca_file(config, "cert.pem") != 0)
-+                               bb_error_msg_and_die("Failed to set ca file");
 +                       pemmem = gather_certificates(config);
 +                       if(tls_configure(ctx,config) != 0)
 +                               bb_error_msg_and_die("Failed to configure client");
@@ -312,7 +308,7 @@ index 6a64836fb..f859f429a 100644
   socket_opened:
  #elif ENABLE_FEATURE_WGET_HTTPS
                 /* Only internal TLS support is configured */
-@@ -1353,7 +1424,35 @@ static void download_one_url(const char *url)
+@@ -1353,7 +1420,35 @@ static void download_one_url(const char *url)
                         shutdown(fileno(sfp), SHUT_WR);
                 }
  #endif