From e448313d686bd4ef3b99778ea88f666a3c82e040 Mon Sep 17 00:00:00 2001
From: David <31015441+deFractal@users.noreply.github.com>
Date: Wed, 4 Aug 2021 16:45:07 -0700
Subject: [PATCH] Add option for local default OpenSSL 1.1 CA file

Provides non-empty default for Homebrew on macOS
---
 ptstream.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ptstream.c b/ptstream.c
index 0ef5f57..46f7e4f 100644
--- a/ptstream.c
+++ b/ptstream.c
@@ -263,8 +263,13 @@ int stream_enable_ssl(PTSTREAM *pts, const char *proxy_arg) {
 	X509* cert = NULL;
 	int status;
 	struct stat st_buf;
+#ifndef LOCAL_OPENSSL11
 	const char *ca_file = NULL;
 	const char *ca_dir = "/etc/ssl/certs/"; /* Default cert directory if none given */
+#else
+	const char *ca_file = "/usr/local/etc/openssl@1.1/cacert.pem";
+	const char *ca_dir = NULL;
+#endif /* !LOCAL_OPENSSL11 */
 	long vresult;
 	char *peer_host = NULL;
 	char proxy_arg_fmt[32];