[OpenWrt-Devel] [PATCH] ca-certificates: ca-bundle: add symlink for openssl default setting

[Daniel Dickinson]

On 2018-07-05 06:51 AM, Yousong Zhou wrote:
> OpenSSL defaults X509_CERT_FILE to /etc/ssl/cert.pem.  This change is
> needed for wget-ssl and possibly others to work seamlessly with fresh
> ca-bundle installation

Out of curiosity will this eliminate the need for installing both 
ca-bundle and ca-certificates? (I know that in the past some packages 
used the certs dir and others the bundle, perhaps this is why?).

Regards,

Daniel

> 
> Fixes openwrt/packages#6152
> 
> Signed-off-by: Yousong Zhou <yszhou4tech at gmail.com>
> ---
>   package/system/ca-certificates/Makefile | 2 ++
>   1 file changed, 2 insertions(+)
> 
> diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile
> index 537cf2f4e9..6de00b7161 100644
> --- a/package/system/ca-certificates/Makefile
> +++ b/package/system/ca-certificates/Makefile
> @@ -8,6 +8,7 @@ include $(TOPDIR)/rules.mk
>   
>   PKG_NAME:=ca-certificates
>   PKG_VERSION:=20180409
> +PKG_RELEASE:=2
>   PKG_MAINTAINER:=Christian Schoenebeck <christian.schoenebeck at gmail.com>
>   
>   PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).tar.xz
> @@ -57,6 +58,7 @@ endef
>   define Package/ca-bundle/install
>   	$(INSTALL_DIR) $(1)/etc/ssl/certs
>   	cat $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt >$(1)/etc/ssl/certs/ca-certificates.crt
> +	$(LN) /etc/ssl/certs/ca-certificates.crt $(1)/etc/ssl/cert.pem
>   endef
>   $(eval $(call BuildPackage,ca-certificates))
>   $(eval $(call BuildPackage,ca-bundle))
> 
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel
> 


_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel