From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: [PATCH] gnu: gnutls: Configure location of system-wide trust store Date: Mon, 02 Feb 2015 18:11:02 -0500 Message-ID: <87r3u7di49.fsf@netris.org> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:35707) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YIQ99-0002qf-B1 for guix-devel@gnu.org; Mon, 02 Feb 2015 18:11:12 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YIQ95-00075O-S7 for guix-devel@gnu.org; Mon, 02 Feb 2015 18:11:11 -0500 Received: from world.peace.net ([50.252.239.5]:59695) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YIQ95-00075J-NZ for guix-devel@gnu.org; Mon, 02 Feb 2015 18:11:07 -0500 List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org --=-=-= Content-Type: text/plain I proposed this change a long time ago, but Andreas objected so I never pushed it. I've been carrying this patch on my own systems ever since, but it's getting to be a bit of a drag, because it means no substitutes for me for an increasingly large amount of software. Here's the conversation we had last time: http://comments.gmane.org/gmane.comp.gnu.guix.devel/1538 Any more thoughts on this? Mark --=-=-= Content-Type: text/x-patch Content-Disposition: inline; filename=0001-gnu-gnutls-Configure-location-of-system-wide-trust-s.patch Content-Description: [PATCH] gnu: gnutls: Configure location of system-wide trust store >From 02bdf748b4c515d6dfc9c264fd48936bd29e04cb Mon Sep 17 00:00:00 2001 From: Mark H Weaver Date: Tue, 18 Feb 2014 21:30:53 -0500 Subject: [PATCH] gnu: gnutls: Configure location of system-wide trust store. * gnu/packages/gnutls.scm (gnutls): Configure the location of the system-wide trust store. --- gnu/packages/gnutls.scm | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/gnu/packages/gnutls.scm b/gnu/packages/gnutls.scm index 4f6bd22..d7eeaa8 100644 --- a/gnu/packages/gnutls.scm +++ b/gnu/packages/gnutls.scm @@ -80,7 +80,17 @@ specifications.") '(#:configure-flags (list (string-append "--with-guile-site-dir=" (assoc-ref %outputs "out") - "/share/guile/site/2.0")))) + "/share/guile/site/2.0") + ;; GnuTLS doesn't consult any environment variables to specify + ;; the location of the system-wide trust store. Instead it has a + ;; configure-time option. Unless specified, its configure script + ;; attempts to auto-detect the location by looking for common + ;; places in the filesystem, none of which are present in our + ;; chroot build environment. If not found, then no default trust + ;; store is used, so each program has to provide its own + ;; fallback, and users have to configure each program + ;; independently. This seems suboptimal. + "--with-default-trust-store-file=/etc/ssl/certs/ca-certificates.crt"))) (native-inputs `(("pkg-config" ,pkg-config))) (inputs -- 2.2.1 --=-=-=--