From mboxrd@z Thu Jan  1 00:00:00 1970
From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=)
Subject: Re: GnuTLS and the =?utf-8?Q?=E2=80=9Ctrust_store=E2=80=9D?=
Date: Fri, 06 Jan 2017 00:10:49 +0100
Message-ID: <87zij52jd2.fsf@gnu.org>
References: <20170104144655.12321-1-ng0@libertad.pw>
	<20170104144655.12321-2-ng0@libertad.pw>
	<874m1ezugu.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me>
	<871swizsqv.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me>
	<87vatuimnp.fsf_-_@gnu.org>
	<87inpty4tw.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me>
	<idjlgupsfwq.fsf@bimsb-sys02.mdc-berlin.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Return-path: <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:42769)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <ludo@gnu.org>) id 1cPHBP-0007Uy-51
	for guix-devel@gnu.org; Thu, 05 Jan 2017 18:10:55 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <ludo@gnu.org>) id 1cPHBL-0006TM-TD
	for guix-devel@gnu.org; Thu, 05 Jan 2017 18:10:55 -0500
In-Reply-To: <idjlgupsfwq.fsf@bimsb-sys02.mdc-berlin.net> (Ricardo Wurmus's
	message of "Thu, 5 Jan 2017 16:08:37 +0100")
List-Id: "Development of GNU Guix and the GNU System distribution."
	<guix-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-devel/>
List-Post: <mailto:guix-devel@gnu.org>
List-Help: <mailto:guix-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=subscribe>
Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org
Sender: "Guix-devel" <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
To: Ricardo Wurmus <ricardo.wurmus@mdc-berlin.de>
Cc: guix-devel@gnu.org

Ricardo Wurmus <ricardo.wurmus@mdc-berlin.de> skribis:

> Marius Bakke <mbakke@fastmail.com> writes:
>
>> Curl respects the variable "CURL_CA_BUNDLE". I think we could add a
>> "native-search-path" for that, similar to how it's done for "git".
>
> =E2=80=9Ccurl=E2=80=9D does but libcurl does not.

But that=E2=80=99s probably on purpose.  What do the cURL developers recomm=
end
for their users?

If they recommend that users roll their own mechanism to designate the
trust store, then they probably do (?), and I think we should avoid
interfering with that.

Thoughts?

Ludo=E2=80=99.