Configure a default trust store for openssl
This commit is contained in:
committed by
Eelco Dolstra
parent
0876a44169
commit
9f358f809d
@@ -33,12 +33,8 @@ stdenv.mkDerivation rec {
|
||||
sed -e 's|/usr/bin|/no-such-path|g' -i.bak configure
|
||||
'';
|
||||
|
||||
# make curl honor CURL_CA_BUNDLE & SSL_CERT_FILE
|
||||
postConfigure = ''
|
||||
echo '#define CURL_CA_BUNDLE (getenv("CURL_CA_BUNDLE") || getenv("SSL_CERT_FILE"))' >> lib/curl_config.h
|
||||
'';
|
||||
|
||||
configureFlags = [
|
||||
"--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt"
|
||||
( if sslSupport then "--with-ssl=${openssl}" else "--without-ssl" )
|
||||
( if scpSupport then "--with-libssh2=${libssh2}" else "--without-libssh2" )
|
||||
]
|
||||
|
||||
@@ -44,12 +44,8 @@ stdenv.mkDerivation rec {
|
||||
rm src/tool_hugehelp.c
|
||||
'';
|
||||
|
||||
# make curl honor CURL_CA_BUNDLE & SSL_CERT_FILE
|
||||
postConfigure = ''
|
||||
echo '#define CURL_CA_BUNDLE (getenv("CURL_CA_BUNDLE") ? getenv("CURL_CA_BUNDLE") : getenv("SSL_CERT_FILE"))' >> lib/curl_config.h
|
||||
'';
|
||||
|
||||
configureFlags = [
|
||||
"--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt"
|
||||
"--disable-manual"
|
||||
"--with-nghttp2=${libnghttp2}"
|
||||
( if sslSupport then "--with-ssl=${openssl}" else "--without-ssl" )
|
||||
|
||||
Reference in New Issue
Block a user