From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Help acme-client find its certificate store Date: Wed, 14 Dec 2016 09:19:44 -0500 Message-ID: <20161214141944.GA7543@jasmine> References: <20161213221505.GA26365@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="UugvWAfsgieZRqgk" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46278) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cHAPQ-0008UT-Dx for guix-devel@gnu.org; Wed, 14 Dec 2016 09:19:53 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cHAPL-0003GY-Ea for guix-devel@gnu.org; Wed, 14 Dec 2016 09:19:52 -0500 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:33586) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cHAPL-0003GM-6R for guix-devel@gnu.org; Wed, 14 Dec 2016 09:19:47 -0500 Received: from localhost (c-68-84-77-42.hsd1.pa.comcast.net [68.84.77.42]) by mail.messagingengine.com (Postfix) with ESMTPA id 18F047F030 for ; Wed, 14 Dec 2016 09:19:46 -0500 (EST) Content-Disposition: inline In-Reply-To: <20161213221505.GA26365@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org --UugvWAfsgieZRqgk Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Dec 13, 2016 at 05:15:05PM -0500, Leo Famulari wrote: > I'm successfully using this package with this change. >=20 > I don't know if this is the "right way" to solve this. Your thoughts? To clarify, here is what happens on Debian Jessie without this change: $ acme-client -nN example.com acme-client: tls_config_set_ca_file: failed to open CA file '/etc/ssl/cert.= pem': No such file or directory: No such file or directory And here are the upstream notes on this subject [0]: "You can also set DEFAULT_CA_FILE for the location of the certificate file loaded by libtls." https://github.com/kristapsdz/acme-client-portable/blob/master/README.md#co= nfiguration > + (let ((pem (string-append (assoc-ref inputs "libressl") > + "/etc/ssl/cert.pem"))) > + (substitute* "http.c" > + (("/etc/ssl/cert.pem") pem)) The upstream maintainer recommends setting this value in 'config.h', but it's only used in 'http.c', so I thought this solution would be a little easier to read. --UugvWAfsgieZRqgk Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlhRVP0ACgkQJkb6MLrK fwh0KxAAigsnOGpW1WvhgqV4NchahfrbRR3YNaLz23NfHGVVhZY7CYMNSM+CrTzI IkOflcj2eNPU3bnXRJypvu2ulyBCLehG3xwNDjoNaRYwqB4z5i8wfVrWf5a3ubj5 7fZUT8Xam0FsigFYVH3bi7Is5RLwLBJmNlJdhgQ0uj8aw+VvEVx2rabbBndSlcpq g4phFC9lx9nkuIyGsIf87lJ+ljE6smz5q4u7+N8JmhQE42wyEl6VJKJI0z6ShOoG l3kaFH16NgCDGBvUu9E0lTN4bAY0JM+3eF2Ol3VKBzfzzDzl3e7bgGxBNWatkdSz Z169cUWiDAZttdCXAcy4zrc6x5TupEykjZjiANSuegQ/eSMw8vcxjFkW01If2Akz VRYH0qPk/QnV6g+OJvIibDXpsh0fAl38Qd2lgIPZ38uZAdSo4XDNN5T/S0AKx8+/ vMwxW79P2Wf4P6JhQtsroxdSsI6rv21IJ/5LFJqhWHScGZcyZdUjxpRcC41ywwIs XQQa/D00C5VGLQHqI6F/p0HVJrFzVV63MWac4CcVvjEsRrbD3tUtz6074OP/GQEZ 9NS8gXvcJD+kWmv1kAIy3i3UZL+WjiVmFKWHXgdNrmFondbwu22sQAbN15Nu4RF5 2cKUIRfeMe8a1kJzQdijQF2jjGHCuwsQe8lkybNBp0U+Pa9sTO4= =aka8 -----END PGP SIGNATURE----- --UugvWAfsgieZRqgk--