Re: [OE-core][PATCH] curl: allow configuration of default CA bundle location

Richard Purdie
2020-04-06T21:06:32Z

On Mon, 2020-04-06 at 22:58 +0200, Yann Dirson wrote:
> The problem motivating this patch may be the same that motivated a
> hack of mine which I never
> cleaned up for submit: at least in some early warrior versions curl
> was attempting to use cacerts
> from the host.
>
> This is a hand-edited copypaste and may not apply cleanly, but you
> should get the idea: make it
> so curl-native uses its own certs and not the host ones.

This should have been the case from 2014:

http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=92cad721d764ec28c3570dfe4a80847c3df19453

You can see fallout from that such as:

http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=754a9c31232979b3f0c28906c28191af55e96be2

where we had to fix curl in nativesdk to have the certs present.

So something odd is going on somewhere but I think OE-Core is fairly
consistent and has been for a few years.

Cheers,

Richard