Re: [OE-core][PATCH] curl: allow configuration of default CA bundle location

jbroadus
2020-04-06T20:36:28Z

On 4/6/20 5:00 AM, Richard Purdie wrote:
> On Sun, 2020-04-05 at 23:00 -0700, Jim Broadus wrote:
>> Add a CA_BUNDLE variable to set the built-in CA bundle location. By default,
>> don't set anything for curl-native since that target's sysconfdir is a
>> location in the recipe's native sysroot directory.
>>
>> Signed-off-by: Jim Broadus <jbroadus@xevo.com>
>
> That is a huge change in behaviour with potentially quite serious side
> effects. As far as I remember we deliberately make our native utils
> self contained rather than relying on the host system (which may or may
> not have cert files).
>
> We point at sysconfdir in the native case since we install ca-
> certificates there if I remember correctly?
>
> Cheers,
>
> Richard
>

Hi Richard. Currently, I don't see the certs installed in the native
sysroot, so maybe this was broken recently. If that was the intended
behavior, I can look for a fix for that instead.

Thanks,
Jim