gnutls-cli: Do not try to load the system CA trust if --insecure is specified.

1 files changed, 5 insertions, 1 deletions

diff --git a/src/cli.c b/src/cli.c
index 4cc858b392..8a76f2c55f 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -1648,7 +1648,11 @@ static void init_global_tls_stuff(void)
 							     x509_cafile,
 							     x509ctype);
 	} else {
-		ret = gnutls_certificate_set_x509_system_trust(xcred);
+		if (insecure == 0) {
+			ret = gnutls_certificate_set_x509_system_trust(xcred);
+		} else {
+			ret = 0;
+		}
 	}
 	if (ret < 0) {
 		fprintf(stderr, "Error setting the x509 trust file\n");