Check for SSL_CTX_set_default_verify_paths return code.

GitOrigin-RevId: 9f282b9c8ea7290588d45e310e667c05742041e9
tallero · Aug 29, 2018 · cb165ad · cb165ad
1 parent 8079285
commit cb165ad
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/tdnet/td/net/SslStream.cpp b/tdnet/td/net/SslStream.cpp
@@ -267,9 +267,15 @@ class SslStreamImpl {
       } else {
         LOG(ERROR) << "Failed to open system certificate store";
       }
-
 #else
-      SSL_CTX_set_default_verify_paths(ssl_ctx);
+      if (SSL_CTX_set_default_verify_paths(ssl_ctx) == 0) {
+        auto error = create_openssl_error(-8, "Failed to load default verify paths");
+        if (verify_peer == VerifyPeer::On) {
+          return error;
+        } else {
+          LOG(ERROR) << error;
+        }
+      }
 #endif
     } else {
       if (SSL_CTX_load_verify_locations(ssl_ctx, cert_file.c_str(), nullptr) == 0) {