Use tls-database instead of ssl-ca-file The latter is deprecated. --- surf.c | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/surf.c b/surf.c index ce8ef83..19a659b 100644 --- a/surf.c +++ b/surf.c @@ -85,6 +85,7 @@ static char winid[64]; static gboolean usingproxy = 0; static char togglestat[7]; static char pagestat[3]; +static GTlsDatabase *tlsdb; static void addaccelgroup(Client *c); static void beforerequest(WebKitWebView *w, WebKitWebFrame *f, @@ -1064,6 +1065,7 @@ setup(void) { char *new_proxy; SoupURI *puri; SoupSession *s; + GError *error = NULL; /* clean up any zombies immediately */ sigchld(0); @@ -1090,7 +1092,13 @@ setup(void) { FALSE))); /* ssl */ - g_object_set(G_OBJECT(s), "ssl-ca-file", cafile, NULL); + tlsdb = g_tls_file_database_new(cafile, &error); + + if (error) { + g_warning("Error loading SSL database %s: %s", cafile, error->message); + g_error_free(error); + } + g_object_set(G_OBJECT(s), "tls-database", tlsdb, NULL); g_object_set(G_OBJECT(s), "ssl-strict", strictssl, NULL); /* proxy */ -- 1.8.3.3