diff options
| author | Daniel Kahn Gillmor <[email protected]> | 2015-10-20 03:48:30 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2016-01-22 10:53:49 +0000 |
| commit | afb8696126ff0babaab23e884ff5da008281e3b7 (patch) | |
| tree | 371c8a68e6a42b04da8a2e8e3bbcc9c91e6ddd2d /dirmngr/ks-engine-http.c | |
| parent | gpg: Rework gpg-conf.skel (diff) | |
| download | gnupg-afb8696126ff0babaab23e884ff5da008281e3b7.tar.gz gnupg-afb8696126ff0babaab23e884ff5da008281e3b7.zip | |
dirmngr: Use sks-keyservers CA by default for the hkps pool.
* dirmngr/Makefile.am (dist_pkgdata_DATA): Add sks-keyservers.netCA.pem.
* dirmngr/http.c (http_session_new): Add optional arg
intended_hostname and set a default cert.
* dirmngr/ks-engine-hkp.c (send_request): Pass httphost to
http_session_new.
--
Ship the certificate for the sks-keyservers hkps pool. If the user
has specified that they want to use
hkps://hkps.pool.sks-keyservers.net, and they have not specified any
hkp-cacert explicitly, then initialize the trust path with this
specific trust anchor.
Co-authored-by: [email protected]
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'dirmngr/ks-engine-http.c')
| -rw-r--r-- | dirmngr/ks-engine-http.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/dirmngr/ks-engine-http.c b/dirmngr/ks-engine-http.c index ae128ee12..c51c0ce9d 100644 --- a/dirmngr/ks-engine-http.c +++ b/dirmngr/ks-engine-http.c @@ -65,7 +65,7 @@ ks_http_fetch (ctrl_t ctrl, const char *url, estream_t *r_fp) estream_t fp = NULL; char *request_buffer = NULL; - err = http_session_new (&session, NULL); + err = http_session_new (&session, NULL, NULL); if (err) goto leave; http_session_set_log_cb (session, cert_log_cb); |