Message ID | 20181116201718.22455-2-tpiepho@impinj.com |
---|---|
State | Accepted |
Headers | show
Return-Path: <buildroot-bounces@busybox.net> X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (mailfrom) smtp.mailfrom=busybox.net (client-ip=140.211.166.137; helo=fraxinus.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=<UNKNOWN>) Authentication-Results: ozlabs.org; dmarc=fail (p=reject dis=none) header.from=impinj.com Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=impinj.com header.i=@impinj.com header.b="UGAIpi/B"; dkim-atps=neutral Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 42xYPn3GtLz9sB7 for <incoming-buildroot@patchwork.ozlabs.org>; Sat, 17 Nov 2018 09:51:40 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id 561DF81A69; Fri, 16 Nov 2018 22:51:38 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NFZs2CT2-8X0; Fri, 16 Nov 2018 22:51:37 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by fraxinus.osuosl.org (Postfix) with ESMTP id 0A4B884540; Fri, 16 Nov 2018 22:51:37 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133]) by ash.osuosl.org (Postfix) with ESMTP id AEB001BF29A for <buildroot@lists.busybox.net>; Fri, 16 Nov 2018 22:51:35 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id ABC78873E8 for <buildroot@lists.busybox.net>; Fri, 16 Nov 2018 22:51:35 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6KOe2qocKhPy for <buildroot@lists.busybox.net>; Fri, 16 Nov 2018 22:51:34 +0000 (UTC) X-Greylist: delayed 01:00:30 by SQLgrey-1.7.6 Received: from NAM05-DM3-obe.outbound.protection.outlook.com (mail-eopbgr730102.outbound.protection.outlook.com [40.107.73.102]) by hemlock.osuosl.org (Postfix) with ESMTPS id 28834880E8 for <buildroot@buildroot.org>; Fri, 16 Nov 2018 22:51:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=impinj.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qo9IVQMedDIPRoOXdseRqRyHaZwHWouhLyPnsoUGJdU=; b=UGAIpi/BKCxZ42TwwF0SdwFNL5qIKH52VEzICsxIH2/wUayLYKmFOmfGF+WJxveFY2gLmHXN34zMC9k5EhaJcdbFU3r7Dl3N/SfpR89Bi3lBqYorZjPjAGiHgGhBG29tAKgv+mUQafR02GrpXF9N+FlzRnF+G28lGiqseB2rOE8= Received: from MWHPR0601MB3708.namprd06.prod.outlook.com (10.167.236.38) by MWHPR0601MB3625.namprd06.prod.outlook.com (10.167.236.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.28; Fri, 16 Nov 2018 20:17:39 +0000 Received: from MWHPR0601MB3708.namprd06.prod.outlook.com ([fe80::f51a:d8dd:1aad:3bf9]) by MWHPR0601MB3708.namprd06.prod.outlook.com ([fe80::f51a:d8dd:1aad:3bf9%3]) with mapi id 15.20.1294.045; Fri, 16 Nov 2018 20:17:39 +0000 From: Trent Piepho <tpiepho@impinj.com> To: "buildroot@buildroot.org" <buildroot@buildroot.org> Thread-Topic: [PATCH 2/2] libcurl: Use GnuTLS's default cert path Thread-Index: AQHUfelr1nGa8k0E/kmGl7i5n3MUdQ== Date: Fri, 16 Nov 2018 20:17:39 +0000 Message-ID: <20181116201718.22455-2-tpiepho@impinj.com> References: <20181116201718.22455-1-tpiepho@impinj.com> In-Reply-To: <20181116201718.22455-1-tpiepho@impinj.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: MWHPR04CA0025.namprd04.prod.outlook.com (2603:10b6:300:ee::11) To MWHPR0601MB3708.namprd06.prod.outlook.com (2603:10b6:301:7c::38) authentication-results: spf=none (sender IP is ) smtp.mailfrom=tpiepho@impinj.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [216.207.205.253] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR0601MB3625; 6:9RLNRWli6rijOly773JLYFnBXXVGy18j4dmh9KAgml7Jx+DTOYKo8A56OP7s9o0NRtK1VxYIgs4U0fjw6cmCAAdPdDcK0nUhtTHdNf2zPKTYL5qAAeb/RfCztLm/4Y0VY+Bf6weqiLJ2+FOu2DwHx2ofH3eU+7lvkq4PXUg8ABZugOv1/8jjSjD7YOS7BhrPxQclbB/UlUcNCIFv1x55fj25DE1bOI7apt2b6tnBq8rmubU3kuV7jXCTIgkh6SBJBt15q8t4zjpnkTF6I+KDsidS2pIvoZbPvADanVL2mwQ21bazO67IQTvmT5pltCMGilCyQMPlwGx44QYiP7ssIN/oRAeyHljGXvPV8+fjeQn9h8V7ht4Joy+rQpnKUCqfHYIWFN7O7ldSdbZdyJVnRAjAGnwZFV4U6eFwY9HlQ+WW3lM1oBzu6eCybj3bXqB0Hf88kEDK8QvjIntewA5gGg==; 5:8TtZiMO1t44SGezG1i8gdbo8cClIPXmnwQhI/wCtBuf5zHo5XThEhsstzkDeRV/SXc4LVNMc7RAYq7Wn4Q9wKO8S3/km834rEBdDaT0d5atFm/Zj/WcKWRly7lkcgOi0n3n71j0dfRWIG3TpPFB22EHhOxVnWi0eMEpAFFUevqg=; 7:Db1TpoC4i/OvzWEh07oPCFnaDXZPhkUgbQsjwQUqie46FEl8O602FsdszHKx9DVQT2qfQpWHict/yFIZA2lH+z9/foEQxFSb/p6xlqHBnuPWMN1klY1dggnE/C9ANx+huOmaenVpH69W2ckPy94xNw== x-ms-office365-filtering-correlation-id: eef0b347-b057-4209-dcf6-08d64c008e1c x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:MWHPR0601MB3625; x-ms-traffictypediagnostic: MWHPR0601MB3625: x-microsoft-antispam-prvs: <MWHPR0601MB3625349FFEF82A1AF6E3E90BD3DD0@MWHPR0601MB3625.namprd06.prod.outlook.com> x-exchange-antispam-report-test: UriScan:; x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231415)(944501410)(52105112)(3002001)(10201501046)(148016)(149066)(150057)(6041310)(20161123558120)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:MWHPR0601MB3625; BCL:0; PCL:0; RULEID:; SRVR:MWHPR0601MB3625; x-forefront-prvs: 0858FF8026 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(136003)(346002)(396003)(39850400004)(189003)(199004)(2501003)(386003)(6506007)(99286004)(305945005)(2351001)(52116002)(6916009)(14454004)(86362001)(76176011)(105586002)(68736007)(8676002)(53936002)(106356001)(5660300001)(6436002)(5640700003)(4326008)(81166006)(107886003)(6486002)(81156014)(1730700003)(71190400001)(8936002)(71200400001)(6512007)(7736002)(66066001)(1076002)(478600001)(316002)(97736004)(25786009)(6116002)(26005)(36756003)(2900100001)(3846002)(476003)(102836004)(11346002)(2906002)(14444005)(186003)(446003)(486006)(256004)(2616005); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR0601MB3625; H:MWHPR0601MB3708.namprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: impinj.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: POkNjDMj2CnAS89OVqZ03J0gxx15uN6rE6d70YyGdJj0IbXSFTlLps89dx6WCs+eFDy80CJzjFiaPMxt7esMOqt2YbW9nW89LZ8vSR7bz1xvKOrqXYf3V5faBKFcT9vxQxuIQMA5m1oZsxuV8PSHBKNb+8kcxJ2Ta29t0BE4refQAKPGgUVVsb9RuckHMG/h81XLZLyaJFAP3SYPsPI0xMuS9a2DB1h6TL1X0CmP3oA3m11WUFRQH+t/R3kaQW4YkLubRzXkY5EGvmPUtcDP7prj5yLhaUk5OIMkhJoRcqpYrP77caQ+zZtkJSkEzQw6dBBq1gxemkns4Ya3gNizKZPcUtEUSXhk934ckDacwnI= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: impinj.com X-MS-Exchange-CrossTenant-Network-Message-Id: eef0b347-b057-4209-dcf6-08d64c008e1c X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2018 20:17:39.0613 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 6de70f0f-7357-4529-a415-d8cbb7e93e5e X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR0601MB3625 Subject: [Buildroot] [PATCH 2/2] libcurl: Use GnuTLS's default cert path X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot <buildroot.busybox.net> List-Unsubscribe: <http://lists.busybox.net/mailman/options/buildroot>, <mailto:buildroot-request@busybox.net?subject=unsubscribe> List-Archive: <http://lists.busybox.net/pipermail/buildroot/> List-Post: <mailto:buildroot@busybox.net> List-Help: <mailto:buildroot-request@busybox.net?subject=help> List-Subscribe: <http://lists.busybox.net/mailman/listinfo/buildroot>, <mailto:buildroot-request@busybox.net?subject=subscribe> Cc: Trent Piepho <tpiepho@impinj.com> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" <buildroot-bounces@busybox.net> |
Series |
[1/2] gnutls: Give library a default trust location
|
expand
|
diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk index 5aa6d542ad..3bc5207951 100644 --- a/package/libcurl/libcurl.mk +++ b/package/libcurl/libcurl.mk @@ -50,7 +50,8 @@ LIBCURL_CONF_OPTS += -without-ssl endif ifeq ($(BR2_PACKAGE_LIBCURL_GNUTLS),y) -LIBCURL_CONF_OPTS += --with-gnutls=$(STAGING_DIR)/usr +LIBCURL_CONF_OPTS += --with-gnutls=$(STAGING_DIR)/usr \ + --with-ca-fallback LIBCURL_DEPENDENCIES += gnutls else LIBCURL_CONF_OPTS += --without-gnutls
libcurl doesn't find any trust path for CA certs when it cross-compiles. When using OpenSSL, it is explicitly configured to use the SSL cert directory with OpenSSL style hash files in it. But with GnuTLS, it gets nothing. Rather than configure libcurl to use the OpenSSL directory or a bundle file, configure it to use the GnuTLS default. This way the CA certs path can be configured in one place (gnutls) and then libcurl and anyone else who uses gnutls can default to that. Also, when libcurl with gnutls is configured to use a directory, it ends up loading each cert three times. Signed-off-by: Trent Piepho <tpiepho@impinj.com> --- package/libcurl/libcurl.mk | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)