mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 14:01:57 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libcurl: also specify the CA bundle location

Browse Source 
When given a certificate directory with --with-ca-path, curl doesn't
list the files in that directory. Instead, it uses the certificate hash
to directly open the requested CA certificate. Therefore, putting a
bundle in that directory and removing all the individual certificates is
not possible.

In order to support use of the bundle, a separate configuration option
--with-ca-bundle is needed. With this option, it is possible to remove
the individual certificates and include just the bundle, which reduces
the size of the root filesystem a bit.

Note that the bundle is generated by the ca-certificates package, which
also installs the individual certificates and the hash symlinks. It
keeps both individual certificates and the bundle in the target.

Signed-off-by: Lance Fredrickson <lancethepants@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
This commit is contained in:
Lance Fredrickson
2025-04-17 13:05:43 -06:00
committed by Arnout Vandecappelle
parent b009935e27
commit 5a63ee3c09
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/libcurl/libcurl.mk
View File

@@ -58,7 +58,8 @@ endif
ifeq ($(BR2_PACKAGE_LIBCURL_OPENSSL),y) ifeq ($(BR2_PACKAGE_LIBCURL_OPENSSL),y)
LIBCURL_DEPENDENCIES += openssl LIBCURL_DEPENDENCIES += openssl
LIBCURL_CONF_OPTS += --with-openssl=$(STAGING_DIR)/usr \ LIBCURL_CONF_OPTS += --with-openssl=$(STAGING_DIR)/usr \
--with-ca-path=/etc/ssl/certs --with-ca-path=/etc/ssl/certs \
--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt
else else
LIBCURL_CONF_OPTS += --without-openssl LIBCURL_CONF_OPTS += --without-openssl
endif endif