Always load CA, key and certificate files at the time the configuration
authorjsing <jsing@openbsd.org>
Wed, 6 Jul 2016 16:16:36 +0000 (16:16 +0000)
committerjsing <jsing@openbsd.org>
Wed, 6 Jul 2016 16:16:36 +0000 (16:16 +0000)
commiteb740efff666faa93092920e9b6b518f4bbf2aec
tree7963a5ed5b6ce915037fa55f344e58fa4f58aa66
parentade4dc82a7d10bf06baa32184f39c3f5b1e1ac9e
Always load CA, key and certificate files at the time the configuration
function is called. This simplifies code and results in a single memory
based code path being used to provide data to libssl. Errors that occur
when accessing the specified file are now detected and propagated
immediately. Since the file access now occurs when the configuration
function is called, we now play nicely with privsep/pledge.

ok beck@ bluhm@ doug@
lib/libtls/tls.c
lib/libtls/tls_config.c
lib/libtls/tls_internal.h