1diff -ru -x '*~' openssl-1.0.2j-orig/crypto/x509/by_file.c openssl-1.0.2j/crypto/x509/by_file.c
2--- openssl-1.0.2j-orig/crypto/x509/by_file.c 2016-09-26 11:49:07.000000000 +0200
3+++ openssl-1.0.2j/crypto/x509/by_file.c 2016-10-13 16:54:31.400288302 +0200
4@@ -97,7 +97,9 @@
5 switch (cmd) {
6 case X509_L_FILE_LOAD:
7 if (argl == X509_FILETYPE_DEFAULT) {
8- file = getenv(X509_get_default_cert_file_env());
9+ file = getenv("NIX_SSL_CERT_FILE");
10+ if (!file)
11+ file = getenv(X509_get_default_cert_file_env());
12 if (file)
13 ok = (X509_load_cert_crl_file(ctx, file,
14 X509_FILETYPE_PEM) != 0);