Skip to content

openssl: Load ca-cert bundle from a portable prefix and bump to 1.1.1e

commit 80b8bbf3:

openssl.recipe: Load ca-cert bundle from a portable prefix

We only use openssl now, which by default picks up a ca cert bundle
file called `cert.pem` inside `OPENSSLDIR`. Without this all
certificate checks fail with the error `Unacceptable TLS certificate`.

Howeve, we can't just use `OPENSSLDIR` since it's hard-coded and will
break portable prefixes, and also the ca-cert file we install is named
differently.

So now by default we load the default system store from
`PREFIX/etc/ssl/certs/ca-certificates.crt` where `PREFIX` is deduced
from the location of `crypto.dll`, which is in bindir.

Fixes #256 (closed)

commit bd7468c2:

openssl.recipe: Bump to 1.1.1e
Edited by Nirbheek Chauhan

Merge request reports