Re: CA bundle for cadaver/neon

[Emmanuel Dreyfus <manu%netbsd.org@localhost>]

On Thu, Oct 20, 2022 at 02:51:30PM +0100, Jonathan Perkin wrote:
> SSLCERTBUNDLE is certainly incorrect if using the bundle from pkgsrc, as
> that is definitely named ca-certificates.crt not ca-bundle.crt.
> 
> At this point only www/curl uses that variable though

Then we could change SSLCERTBUNDLE in pkgsrc/security/openssl/builtin.mk
to ${SSLCERTS}/ca-certificates.crt and do this in pkgsrc/www/curl/Makefile

CURL_SSLCERTBUNDLE=${SSLCERTS}/ca-bundle.crt
.if !empty(CURL_SSLCERTBUNDLE)
CONFIGURE_ARGS+=        --with-ca-bundle=${CURL_SSLCERTBUNDLE}
.elif !empty(SSLCERTBUNDLE)
CONFIGURE_ARGS+=        --with-ca-bundle=${SSLCERTBUNDLE}
.else
CONFIGURE_ARGS+=        --with-ca-path=${SSLCERTS}
.endif

That way we would avoid further mistakes and avoid breaking curl.

-- 
Emmanuel Dreyfus
manu%netbsd.org@localhost