cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [PATCH] Removing the ca-bundle

From: Dan Fandrich <dan_at_coneharvesters.com>
Date: Sun, 17 Feb 2008 22:31:59 -0800

On Sun, Feb 17, 2008 at 09:06:35PM +0100, Daniel Stenberg wrote:
> One step in the process to remove the ca-bundle we provide, is to adjust the
> configure script to instead allow it to get pointed to an existing ca-bundle
> to use as default, and if none is given it should check for an existing
> known one.
>
> My approach is to change the --with-ca-bundle / --without-ca-bundle options
> according to the attached patch.
>
> I'm interested in feedback!

Mandriva and RHEL both store the bundle at /etc/pki/tls/certs/ca-bundle.crt
Old Red Hat systems store it at /usr/share/ssl/certs/ca-bundle.crt Those
could be added to the search path.

> +dnl CURL_CHECK_CA_BUNDLE
> +dnl -------------------------------------------------
> +dnl Check if a default ca-bundle should be used
> +
> +AC_DEFUN([CURL_CHECK_CA_BUNDLE], [
> + if test X"$SSL_ENABLED" != "X"; then

Passing in $SSL_ENABLED as a parameter to the function would break the
dependency the macro otherwise has to the curl configure file.

>>> Dan

-- 
http://www.MoveAnnouncer.com              The web change of address service
          Let webmasters know that your web site has moved
Received on 2008-02-18