Use TLS_CA_CERT_FILE instead of a separate define.

ok beck@ bluhm@ tb@

1 files changed, 2 insertions, 4 deletions

diff --git a/src/usr.sbin/ocspcheck/http.c b/src/usr.sbin/ocspcheck/http.c
index 6830bacaec..ce479f27ef 100644
--- a/src/usr.sbin/ocspcheck/http.c
+++ b/src/usr.sbin/ocspcheck/http.c
@@ -1,4 +1,4 @@
-/*      $Id: http.c,v 1.9 2017/03/26 18:41:02 deraadt Exp $ */
+/*      $Id: http.c,v 1.10 2018/11/06 20:41:11 jsing Exp $ */
 /*
  * Copyright (c) 2016 Kristaps Dzonsons <kristaps@bsd.lv>
  *
@@ -35,8 +35,6 @@
 #include "http.h"
 #include <tls.h>
 
-#define DEFAULT_CA_FILE "/etc/ssl/cert.pem"
-
 /*
  * A buffer for transferring HTTP/S data.
  */
@@ -137,7 +135,7 @@ http_init()
                 goto err;
         }
 
-        if (tls_config_set_ca_file(tlscfg, DEFAULT_CA_FILE) == -1) {
+        if (tls_config_set_ca_file(tlscfg, TLS_CA_CERT_FILE) == -1) {
                 warn("tls_config_set_ca_file: %s", tls_config_error(tlscfg));
                 goto err;
         }