Unbreak s_client, which should be allowed by pledge(2) to do DNS requests.

From todd@

2 files changed, 4 insertions, 4 deletions

diff --git a/src/usr.bin/openssl/openssl.c b/src/usr.bin/openssl/openssl.c
index 374bcd27d0..f99c625260 100644
--- a/src/usr.bin/openssl/openssl.c
+++ b/src/usr.bin/openssl/openssl.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: openssl.c,v 1.19 2015/10/17 07:51:10 semarie Exp $ */
+/* $OpenBSD: openssl.c,v 1.20 2015/11/21 16:03:06 jca Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -438,7 +438,7 @@ main(int argc, char **argv)
         arg.data = NULL;
         arg.count = 0;
 
-        if (pledge("stdio inet rpath wpath cpath proc flock tty", NULL) == -1) {
+        if (pledge("stdio inet rpath wpath cpath proc flock tty dns", NULL) == -1) {
                 fprintf(stderr, "openssl: pledge: %s\n", strerror(errno));
                 exit(1);
         }
diff --git a/src/usr.bin/openssl/s_client.c b/src/usr.bin/openssl/s_client.c
index ed7ecfa714..c73a5fd38f 100644
--- a/src/usr.bin/openssl/s_client.c
+++ b/src/usr.bin/openssl/s_client.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s_client.c,v 1.23 2015/10/17 15:00:11 doug Exp $ */
+/* $OpenBSD: s_client.c,v 1.24 2015/11/21 16:03:06 jca Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -365,7 +365,7 @@ s_client_main(int argc, char **argv)
         long socket_mtu = 0;
 
         if (single_execution) {
-                if (pledge("stdio inet rpath wpath cpath tty", NULL) == -1) {
+                if (pledge("stdio inet rpath wpath cpath tty dns", NULL) == -1) {
                         perror("pledge");
                         exit(1);
                 }