Ignore unreadable cert files.

2 files changed, 4 insertions, 6 deletions

diff --git a/tcpd/libcouriergnutls.c b/tcpd/libcouriergnutls.c
index 7f65b04..5a9ff63 100644
--- a/tcpd/libcouriergnutls.c
+++ b/tcpd/libcouriergnutls.c
@@ -377,7 +377,7 @@ static int read_cert_dir(const char *cert_dir,
 
 		strcat(strcat(strcpy(buf, cert_dir), "/"), de->d_name);
 
-		if (lstat(buf, &stat_buf) < 0 || !S_ISREG(stat_buf.st_mode))
+		if (stat(buf, &stat_buf) < 0 || !S_ISREG(stat_buf.st_mode))
 		{
 			free(buf);
 			continue;
diff --git a/tcpd/libcouriertls.c b/tcpd/libcouriertls.c
index 03f819c..d62d722 100644
--- a/tcpd/libcouriertls.c
+++ b/tcpd/libcouriertls.c
@@ -830,13 +830,11 @@ SSL_CTX *tls_create_int(int isserver, const struct tls_info *info,
 					      "/"), de->d_name);
 
 				fp=fopen(q, "r");
-				if (!fp)
-				{
-					nonsslerror(info, q);
-					exit(1);
-				}
 				free(q);
 
+				if (!fp)
+					continue;
+
 				while ((x=PEM_read_X509(fp, NULL, NULL, NULL)))
 				{
 					SSL_CTX_add_client_CA(ctx,x);