Summary

openssl load system certs

Metadata

Attachments

Description

Patch attached to read the system default certs (configurable via parameter). It also removes (nullifies the action of) the default CA directory parameter because the default of /etc/ssl/certs only works on Debian based systems, and it doesn’t let you select a default certs.pem file anyway.

This is tested on OS X Sierra and should work fine on Debian and RedHat, please test. This lets henrietta-cache automatically work on OS X with Homebrew openssl, which it could not before, as the cert path was invalid.

Changes and comments

[2018-11-11 01:56:08 UTC] zbigniew attached openssl-default-certs.diff.txt (description=#f)

[2018-11-11 03:09:46 UTC] zbigniew changed version from 5.0.0 to 4.13.0

[2021-04-12 08:57:49 UTC] sjamaan changed status from new to assigned

[2021-04-12 08:57:49 UTC] sjamaan changed owner from chust to wasamasa

[2021-04-12 20:17:53 UTC] wasamasa changed owner from wasamasa to Jim Ursetto

[2021-04-12 20:17:53 UTC] wasamasa wrote:

Sorry Jim, but there have been changes to openssl in the meantime that conflict with the patch in ssl-default-certificate-authority-directory, ssl-make-client-context*, ssl-listen* and ssl-start*. Maybe the egg works on macOS now. That aside, the patch needs to be adjusted to use (ssl-load-default-root-certificates?), otherwise it cannot be disabled.