dirmngr: Load all system provided certificates.
authorWerner Koch <wk@gnupg.org>
Thu, 16 Feb 2017 17:58:27 +0000 (18:58 +0100)
committerWerner Koch <wk@gnupg.org>
Thu, 16 Feb 2017 17:58:27 +0000 (18:58 +0100)
commit9a1a5ca0bc2cfb17ccf632de3e134b6d789c6855
treebf5b157a897ca6176b2fe1d0d707aaf6e28bbede
parent09d71de4d4f0a813ba3e584540f899bfd6c568cd
dirmngr: Load all system provided certificates.

* configure.ac: Add option --default-trust-store.
(DEFAULT_TRUST_STORE_FILE): New ac_define.
* dirmngr/certcache.c: Include ksba-io-support.h.
(total_trusted_certificates, total_system_trusted_certificates): New.
(put_cert): Manage the new counters.
(cert_cache_deinit): Reset them.
(cert_cache_print_stats): Print them.
(is_trusted_cert): Add arg WITH_SYSTRUST.  Change all callers to pass
false.
(load_certs_from_file): New.
(load_certs_from_system): New.
(cert_cache_init): Load system certificates.
--

Note that this code does not yet allow to load the system certificates
on Windows.

Signed-off-by: Werner Koch <wk@gnupg.org>
configure.ac
dirmngr/certcache.c
dirmngr/certcache.h
dirmngr/validate.c