expose the default cert file as a function, not a define. it's really

an internal detail of the library, so the string should live inside it,
not in the application code.
ok jsing

1 files changed, 9 insertions, 1 deletions

diff --git a/src/lib/libtls/tls_config.c b/src/lib/libtls/tls_config.c
index 07019252a7..9992c60661 100644
--- a/src/lib/libtls/tls_config.c
+++ b/src/lib/libtls/tls_config.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls_config.c,v 1.52 2018/04/07 16:35:34 jsing Exp $ */
+/* $OpenBSD: tls_config.c,v 1.53 2018/11/29 14:24:23 tedu Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -27,6 +27,14 @@
 
 #include "tls_internal.h"
 
+static const char default_ca_file[] = "/etc/ssl/cert.pem";
+
+const char *
+tls_default_ca_cert_file(void)
+{
+        return default_ca_file;
+}
+
 int
 tls_config_load_file(struct tls_error *error, const char *filetype,
     const char *filename, char **buf, size_t *len)