Radish alpha
H
HardenedBSD-pkg
rad:z3QDZAW2FAfuLvihrhiyDC9fAD8G9
HardenedBSD Package Manager
Radicle
Git
Commits › f59cb51
curl: allow to specify the CA to use via env var
Baptiste Daroussin committed 2 years ago
commit f59cb51be575ff34532a9a4efc6c8e98a51a624d
parent 546b43d
1 file changed +3 -0
modified libpkg/fetch_libcurl.c
@@ -358,6 +358,7 @@ curl_fetch(struct pkg_repo *repo, int dest, struct fetch_item *fi)
	const char *http_proxy = getenv("HTTP_PROXY");

	const char *sslkey = getenv("SSL_CLIENT_KEY_FILE");

	const char *sslcert = getenv("SSL_CLIENT_CERT_FILE");
+ 
	const char *ssl_ca_cert_path = getenv("SSL_CA_CERT_PATH");



	struct curl_repodata *cr = (struct curl_repodata *)repo->fetch_priv;
@@ -444,6 +445,8 @@ retry:
		curl_easy_setopt(cl, CURLOPT_SSLKEY, sslkey);

	if (sslcert != NULL)

		curl_easy_setopt(cl, CURLOPT_SSLCERT, sslcert);
+ 
	if (ssl_ca_cert_path != NULL)
+ 
		curl_easy_setopt(cl, CURLOPT_CAINFO, ssl_ca_cert_path);



	if (repo->ip == IPV4)

		curl_easy_setopt(cl, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);