[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] gnurl: add CA path to configure-flags
From: |
Ludovic Courtès |
Subject: |
Re: [PATCH] gnurl: add CA path to configure-flags |
Date: |
Mon, 13 Jun 2016 16:43:32 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) |
Hi,
Andreas Enge <address@hidden> skribis:
> On Sat, Jun 11, 2016 at 08:51:28PM +0000, ng0 wrote:
>> * gnurl(configure-flags): --with-ca-path=/etc/ssl/certs/
>
> my impression is that this absolute path does not do what we would like
> it to. Optimally, the user would decide, by installing a certificate bundle
> into the profile, which certificates to use. And on a foreign distro, the
> random certificate bundle in /etc/ssl/certs, which does not come from Guix,
> would be used by the Guix gnurl, which would be surprising.
Besides, our cURL and Gnurl packages are linked against GnuTLS, which is
itself configured with ‘--with-default-trust-store-dir=/etc/ssl/certs’.
Does ‘--with-ca-path’ change anything to that?
Thanks,
Ludo’.