diff options
| author | Nirbheek Chauhan <nirbheek@centricular.com> | 2020-03-30 21:57:07 +0530 |
|---|---|---|
| committer | Nirbheek Chauhan <nirbheek@centricular.com> | 2020-03-31 19:53:02 +0530 |
| commit | 839e173640c7aafc24ca6dad3ce7011d83871d56 (patch) | |
| tree | a88135ae43e9ec3d129637cef7c4f1eb4be517a4 /recipes/ca-certificates.recipe | |
| parent | 4656afa3514abdfdd423db53d6fb9180b8f223a0 (diff) | |
openssl.recipe: Load ca-cert bundle from a portable prefix
We only use openssl now, which by default picks up a ca cert bundle
file called `cert.pem` inside `OPENSSLDIR`. Without this all
certificate checks fail with the error `Unacceptable TLS certificate`.
Howeve, we can't just use `OPENSSLDIR` since it's hard-coded and will
break portable prefixes, and also the ca-cert file we install is named
differently.
So now by default we load the default system store from
`PREFIX/etc/ssl/certs/ca-certificates.crt` where `PREFIX` is deduced
from the location of `crypto.dll`, which is in bindir.
Fixes https://gitlab.freedesktop.org/gstreamer/cerbero/issues/256
Diffstat (limited to 'recipes/ca-certificates.recipe')
| -rw-r--r-- | recipes/ca-certificates.recipe | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/recipes/ca-certificates.recipe b/recipes/ca-certificates.recipe index e7ebfc13..a35d4a8a 100644 --- a/recipes/ca-certificates.recipe +++ b/recipes/ca-certificates.recipe @@ -21,7 +21,7 @@ class Recipe(recipe.Recipe): dst_dir = os.path.join(self.config.prefix, 'etc', 'ssl', 'certs') if not os.path.exists(dst_dir): os.makedirs(dst_dir) - src_dir = os.path.join(self.config.recipes_dir, 'ca-certificates') + src_dir = os.path.join(self.recipe_dir(), self.name) for f in self.files_etc: fname = os.path.basename(f) s = os.path.join(src_dir, fname) |