[bug#70674] [PATCH core-updates 0/1] Allow cargo to use custom SSL certificates

[bug#70674] [PATCH core-updates 0/1] Allow cargo to use custom SSL certificates

[Jean-Baptiste Note]

Cargo, just like git, allows certificate validation against a customized set
of certificates. Add the required native-path for this, just like
GIT_SSL_CAINFO for git.

Jean-Baptiste Note (1):
  gnu: rust: Add CARGO_HTTP_CAINFO to native-search-path.

 gnu/packages/rust.scm | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

-- 
2.41.0

[bug#70674] [PATCH core-updates 1/1] gnu: rust: Add CARGO_HTTP_CAINFO to native-search-path.

[Jean-Baptiste Note]

* gnu/packages/rust.scm (rust-1.55): Add CARGO_HTTP_CAINFO native-search-path
so that Cargo honors custom certificates (a la GIT_SSL_CAINFO).
---
 gnu/packages/rust.scm | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/rust.scm b/gnu/packages/rust.scm
index 60aa9b1ea0..aaba458933 100644
--- a/gnu/packages/rust.scm
+++ b/gnu/packages/rust.scm
@@ -539,9 +539,18 @@ (define-public rust-1.55
     (inputs
      `(("llvm" ,llvm-13)
        ("openssl" ,openssl)))
-    ;; rustc invokes gcc, so we need to set its search paths accordingly.
     (native-search-paths
-      %gcc-search-paths)
+     (cons
+      ;; For HTTPS access, Cargo reads from a single-file certificate
+      ;; specified with $CARGO_HTTP_CAINFO. See
+      ;; https://doc.rust-lang.org/cargo/reference/environment-variables.html
+      (search-path-specification
+       (variable "CARGO_HTTP_CAINFO")
+       (file-type 'regular)
+       (separator #f)              ;single entry
+       (files '("etc/ssl/certs/ca-certificates.crt")))
+      ;; rustc invokes gcc, so we need to set its search paths accordingly.
+      %gcc-search-paths))
     ;; Limit this to systems where the final rust compiler builds successfully.
     (supported-systems '("x86_64-linux" "aarch64-linux" "riscv64-linux"))
     (synopsis "Compiler for the Rust programming language")
-- 
2.41.0

bug#70674: [PATCH core-updates 1/1] gnu: rust: Add CARGO_HTTP_CAINFO to native-search-path.

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 379 bytes --]

Better late than never! I've moved it from rust-1.55 to the last rust
package. I pushed it to the rust-team branch so it wouldn't cause a
world rebuild on master.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]