commit 32b1638ebc95d2808f7531d51850a385ee74db2b
from: Omar Polo <op@omarpolo.com>
date: Mon Jul 24 09:28:01 2023 UTC

run tls_connect_socket() after dropping the "inet dns" pledge promises

commit - 9888507cd4212b360fc15e4262e5fd95844efc7c
commit + 32b1638ebc95d2808f7531d51850a385ee74db2b
blob - f76deeb670ee35ddd262c3c180f2ecb27e609f5b
blob + d3b781af8a9a75fa134602ad7c945738b5f63e44
--- titan.c
+++ titan.c
@@ -293,14 +293,15 @@ main(int argc, char **argv)
 		errx(1, "tls_configure: %s", tls_error(ctx));
 
 	sock = dial(iri.host, iri.port);
-	if (tls_connect_socket(ctx, sock, iri.host) == -1)
-		errx(1, "failed to connect to %s:%s: %s", iri.host,
-		    *iri.port == '\0' ? "1965" : iri.port, tls_error(ctx));
 
 	/* drop inet tls */
 	if (pledge("stdio", NULL) == -1)
 		err(1, "pledge");
 
+	if (tls_connect_socket(ctx, sock, iri.host) == -1)
+		errx(1, "failed to connect to %s:%s: %s", iri.host,
+		    *iri.port == '\0' ? "1965" : iri.port, tls_error(ctx));
+
 	/* send request */
 	if (iomux(ctx, sock, req, strlen(req), NULL, 0) == -1)
 		errx(1, "I/O error: %s", tls_error(ctx));