From 543f0f34095fd3775350a028db241378f1e4dd80 Mon Sep 17 00:00:00 2001 From: doug <> Date: Sat, 17 Oct 2015 15:00:11 +0000 Subject: Exit if a pledge call fails in non-interactive mode. ok semarie@ --- src/usr.bin/openssl/verify.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src/usr.bin/openssl/verify.c') diff --git a/src/usr.bin/openssl/verify.c b/src/usr.bin/openssl/verify.c index 4975ad5b6e..d9b5ef9795 100644 --- a/src/usr.bin/openssl/verify.c +++ b/src/usr.bin/openssl/verify.c @@ -1,4 +1,4 @@ -/* $OpenBSD: verify.c,v 1.5 2015/10/10 22:28:51 doug Exp $ */ +/* $OpenBSD: verify.c,v 1.6 2015/10/17 15:00:11 doug Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -86,8 +86,10 @@ verify_main(int argc, char **argv) X509_VERIFY_PARAM *vpm = NULL; if (single_execution) { - if (pledge("stdio rpath", NULL) == -1) + if (pledge("stdio rpath", NULL) == -1) { perror("pledge"); + exit(1); + } } cert_ctx = X509_STORE_new(); -- cgit v1.2.3-55-g6feb