Menu

#610 curl needs some help finding its SSL certificates

closed-rejected
nobody
5
2012-08-16
2012-07-27
No

On some distributions, curl is installed in such a way that it cannot find its certification authority bundle without help. The most common way to remedy that issue is to configure an environment variable CURL_CA_BUNDLE that points to the appropriate file, which typically resides in

/etc/ssl/certs/ca-bundle.crt

or

/etc/ca-bundle.crt
/etc/ca-bundle.crt

The attached patch adds support for that variable.

The attached patch adds support for that variable.

Discussion

  • Peter Simons

    Peter Simons - 2012-07-27

    honor CURL_CA_BUNDLE environment variable

     
  • Rolf

    Rolf - 2012-08-16

    I'd oppose adding code to fix broken distributions. This should really be fixed in those distributions. And if there was good reason it can't be done then it should be fixed in curl. Do you really want to add this for every program that uses curl?

     
  • Rolf

    Rolf - 2012-08-16
    • status: open --> closed-rejected
     
  • Peter Simons

    Peter Simons - 2012-08-16

    Well, if you would like your users to run into weird SSL certificate errors that they don't know how to fix, then you're on the right path.

     

Log in to post a comment.

MongoDB Logo MongoDB