Re: TLS CApath patch (probably bugfix)

Philipp Morger:
> Sorry, for opening a new thread... but it seemed I was just bubbeling
> with myself.... I belive I found the problem and that it is a problem in
> the code of postfix - a mere typo.
>
> Here is the patch:
>
> --- postfix-2.2-20050216/src/tls/tls_server.c 2004-12-19 16:21:07.000000000 +0100
> +++ postfix-2.2-20050216-patched/src/tls/tls_server.c 2005-02-17 12:28:22.000000000 +0100
> @@ -333,7 +333,7 @@
> * copy of the CApath directory for chroot-jail.
> */
> if (tls_set_ca_certificate_info(server_ctx, var_smtpd_tls_CAfile,
> - var_smtpd_tls_CAfile) < 0) {
> + var_smtpd_tls_CApath) < 0) {
> SSL_CTX_free(server_ctx); /* 200411 */
> return (0);
> }
>
>
> Could someone with decent knowledge in C, and TLS please verify that it is
> indeed the scenario as I claim.

Yep, that was a typo in tls_server. The code in tls_client is OK.

Wietse