Re: How to handle updates to mozilla-rootcerts?

[Martin Husemann <martin%duskware.de@localhost>]

On Sun, Apr 22, 2018 at 07:29:43PM -0400, Greg Troxel wrote:
> Agreed in theory, but the mozilla rootcerts package has code to find the
> system openssl config and change it at install time, and it seems that
> various packages have it as a build dependency.

Random thought:

maybe this build dependency should be replaced by a "make sure
that we can fetch using https" check?

If the build machine has working https (including certificate validation),
all is fine.

If not, a hint is printed that installing mozilla rootcerts may be an easy
way to fix the issue.

The check could just be testing a make variable from mk.conf.

Martin