From 2af78232fc87dcdf007cbda074c97dbc79e00082 Mon Sep 17 00:00:00 2001
From: Julian Vetter <julian@outer-limits.org>
Date: Thu, 22 Jan 2026 17:11:16 +0100
Subject: [PATCH] package/php: make sure ca-certificates can be found

If BR2_PACKAGE_CA_CERTIFICATES is present, add the ca-certificates.crt
to the php.ini, to not get SSL errors when using PHP.

Signed-off-by: Julian Vetter <julian@outer-limits.org>
Reviewed-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
---
 package/php/php.mk | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/package/php/php.mk b/package/php/php.mk
index 48525b7e29..cd1270be57 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -353,6 +353,14 @@ endef
 
 PHP_POST_INSTALL_TARGET_HOOKS += PHP_INSTALL_FIXUP
 
+ifeq ($(BR2_PACKAGE_CA_CERTIFICATES),y)
+define PHP_CERTIFICATES_FIXUP
+	$(SED) 's%;openssl.cafile=%openssl.cafile=/etc/ssl/certs/ca-certificates.crt%' \
+		$(TARGET_DIR)/etc/php.ini
+endef
+PHP_POST_INSTALL_TARGET_HOOKS += PHP_CERTIFICATES_FIXUP
+endif
+
 PHP_CONF_ENV += CFLAGS="$(PHP_CFLAGS)" CXXFLAGS="$(PHP_CXXFLAGS)"
 
 HOST_PHP_CONF_OPTS = \