===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/nc/netcat.c,v
retrieving revision 1.198
retrieving revision 1.199
diff -c -r1.198 -r1.199
*** src/usr.bin/nc/netcat.c	2018/11/09 04:05:14	1.198
--- src/usr.bin/nc/netcat.c	2018/11/29 14:25:06	1.199
***************
*** 1,4 ****
! /* $OpenBSD: netcat.c,v 1.198 2018/11/09 04:05:14 bluhm Exp $ */
  /*
   * Copyright (c) 2001 Eric Jackson <ericj@monkey.org>
   * Copyright (c) 2015 Bob Beck.  All rights reserved.
--- 1,4 ----
! /* $OpenBSD: netcat.c,v 1.199 2018/11/29 14:25:06 tedu Exp $ */
  /*
   * Copyright (c) 2001 Eric Jackson <ericj@monkey.org>
   * Copyright (c) 2015 Bob Beck.  All rights reserved.
***************
*** 97,106 ****
  int	rtableid = -1;
  
  int	usetls;					/* use TLS */
! char    *Cflag;					/* Public cert file */
! char    *Kflag;					/* Private key file */
! char    *oflag;					/* OCSP stapling file */
! char    *Rflag = TLS_CA_CERT_FILE;		/* Root CA file */
  int	tls_cachanged;				/* Using non-default CA file */
  int     TLSopt;					/* TLS options */
  char	*tls_expectname;			/* required name in peer cert */
--- 97,106 ----
  int	rtableid = -1;
  
  int	usetls;					/* use TLS */
! const char    *Cflag;				/* Public cert file */
! const char    *Kflag;				/* Private key file */
! const char    *oflag;				/* OCSP stapling file */
! const char    *Rflag;				/* Root CA file */
  int	tls_cachanged;				/* Using non-default CA file */
  int     TLSopt;					/* TLS options */
  char	*tls_expectname;			/* required name in peer cert */
***************
*** 167,172 ****
--- 167,173 ----
  	host = NULL;
  	uport = NULL;
  	sv = NULL;
+ 	Rflag = tls_default_ca_cert_file();
  
  	signal(SIGPIPE, SIG_IGN);