Re: [ptxdist] [PATCH] libcurl: Added an option set to compile libcurl with optional builtin CA certificate default directory or builtin CA certificate default bundle file.

[Michael Olbrich <m.olbrich@pengutronix.de>]

On Fri, Apr 10, 2015 at 01:40:27PM +0000, Bruno Thomsen wrote:
> > To create a bundle we would need the script mk-ca-bundle.pl that comes with curl, right?
> 
> Yes.
> 
> > Bruno, if I apply this patch here, you could change your host-certdata package into a target package that installs the CA bundle itself. Would that make sense to you?
> 
> Okay, so I change the host-certdata package to a public-ca-bundle target
> package in the network section that selects LIBCURL_SSL_CABUNDLE and run the
> mk-ca-bundle.pl script from curl and install the result into
> LIBCURL_SSL_CABUNDLE_PATH.

So, I had my own use-case for this. I've now created a ca-certificates.
I've imported the script used by Debian to split the certdata.txt.

I've applied this patch and added an option to libcurl to explicitly use this.

Christoph: can you verify that I didn't break your use-case?
Bruno: I think this works for you as well?

I think we talked about the version for the certdata.txt file before. I
decided to us the latest commit hash from 'default' and use the date as
version to give some indication how old it is. This way, we can have the
latest version but keep it reproducible.

Michael

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

-- 
ptxdist mailing list
ptxdist@pengutronix.de