Re: [PATCHES] profiles: Produce a single-file CA certificate bundle

[ludo@gnu.org (Ludovic Courtès)]

Andreas Enge <andreas@enge.fr> skribis:

> privat@debian:/tmp/openssl-1.0.2$ find -type f -exec grep -H SSL_CERT_FILE {} \;
> ./crypto/cryptlib.h:# define X509_CERT_FILE_EVP       "SSL_CERT_FILE"

Indeed, I stand corrected.

And Lynx does fiddle with it, but only when built with GnuTLS:

  #ifdef USE_GNUTLS_INCL
          if ((certfile = LYGetEnv("SSL_CERT_FILE")) != NULL) {

> So I think it is used and our search path is fine.

There’s still the problem that none of these is a search path, though it
works OK for the recommendation that’s printed when installing in a
profile.

So I’ve pushed this as commit da69977 in ‘core-updates’, but we’ll have
to extend ‘search-path-specification’ to describe things like that that
are not search paths.

Thanks,
Ludo’.