pkgsrc-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: pkg/54130: If individual certs do not exist in --with-ca-path, curl cannot validate certificates



* Leonardo Taccari <leot%NetBSD.org@localhost> [2019-04-20 09:20 -0400]:
In that case unfortunately I think that possible way to address that
are (apart local patch has you have proposed):
[...]

 - workaround that by setting appropriate environment variables
   (CURL_CA_BUNDLE and/or SSL_CERT_FILE)

Thanks!

That sounds like an eminently sensible and easy to implement solution -
I didn't even think about external variables (probably because I was
working within pkgsrc), and can easily throw something in my .profile
that will make sure this is set where appropriate.

IMHO the patch proposed could actually leads to possible more
surprising results (e.g. then curl behaviour will depends on the
platform where it will build if the cabundle file was present or
not.).^[0]

[0]: gnutls had actually such problem: it unconditionally checked
     cabundle, capath files and depending if such files were present in
     the system set their preferred locations and that wasn't
     particularly fun to debug. :)

Understood, and thanks for helping me solve this!

-dave

Attachment: signature.asc
Description: PGP signature



Home | Main Index | Thread Index | Old Index