[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Help acme-client find its certificate store

From: Leo Famulari
Subject: Re: Help acme-client find its certificate store
Date: Wed, 14 Dec 2016 09:19:44 -0500
User-agent: Mutt/1.7.1 (2016-10-04)

On Tue, Dec 13, 2016 at 05:15:05PM -0500, Leo Famulari wrote:
> I'm successfully using this package with this change.
> I don't know if this is the "right way" to solve this. Your thoughts?

To clarify, here is what happens on Debian Jessie without this change:

$ acme-client -nN
acme-client: tls_config_set_ca_file: failed to open CA file 
'/etc/ssl/cert.pem': No such file or directory: No such file or directory

And here are the upstream notes on this subject [0]:

"You can also set DEFAULT_CA_FILE for the location of the certificate
file loaded by libtls."

> +             (let ((pem (string-append (assoc-ref inputs "libressl")
> +                                       "/etc/ssl/cert.pem")))
> +               (substitute* "http.c"
> +                 (("/etc/ssl/cert.pem") pem))

The upstream maintainer recommends setting this value in 'config.h', but
it's only used in 'http.c', so I thought this solution would be a little
easier to read.

Attachment: signature.asc
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]