From 839e173640c7aafc24ca6dad3ce7011d83871d56 Mon Sep 17 00:00:00 2001 From: Nirbheek Chauhan Date: Mon, 30 Mar 2020 21:57:07 +0530 Subject: openssl.recipe: Load ca-cert bundle from a portable prefix We only use openssl now, which by default picks up a ca cert bundle file called `cert.pem` inside `OPENSSLDIR`. Without this all certificate checks fail with the error `Unacceptable TLS certificate`. Howeve, we can't just use `OPENSSLDIR` since it's hard-coded and will break portable prefixes, and also the ca-cert file we install is named differently. So now by default we load the default system store from `PREFIX/etc/ssl/certs/ca-certificates.crt` where `PREFIX` is deduced from the location of `crypto.dll`, which is in bindir. Fixes https://gitlab.freedesktop.org/gstreamer/cerbero/issues/256 --- recipes/ca-certificates.recipe | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'recipes/ca-certificates.recipe') diff --git a/recipes/ca-certificates.recipe b/recipes/ca-certificates.recipe index e7ebfc13..a35d4a8a 100644 --- a/recipes/ca-certificates.recipe +++ b/recipes/ca-certificates.recipe @@ -21,7 +21,7 @@ class Recipe(recipe.Recipe): dst_dir = os.path.join(self.config.prefix, 'etc', 'ssl', 'certs') if not os.path.exists(dst_dir): os.makedirs(dst_dir) - src_dir = os.path.join(self.config.recipes_dir, 'ca-certificates') + src_dir = os.path.join(self.recipe_dir(), self.name) for f in self.files_etc: fname = os.path.basename(f) s = os.path.join(src_dir, fname) -- cgit v1.2.3