Browse Source

package/libcurl: fix missing CA bundle when wolfssl is SSL/TLS provider

Without CA bundle curl can not verify the remote peer and work with https.
This is fixed by adding a config option pointing to the default location
for CA bundle in buildroot. Alternatives like OpenSSL and MbedTLS use the
same path, however the wolfSSL build options for libcurl did not include
this path until now.

Signed-off-by: Dimitar Tomov <dimi@tpm.dev>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b4d301c6413074ba88be2625305631524476f417)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Dimitar Tomov 3 years ago
parent
commit
c29660ff2c
1 changed files with 1 additions and 0 deletions
  1. 1 0
      package/libcurl/libcurl.mk

+ 1 - 0
package/libcurl/libcurl.mk

@@ -77,6 +77,7 @@ endif
 
 ifeq ($(BR2_PACKAGE_LIBCURL_WOLFSSL),y)
 LIBCURL_CONF_OPTS += --with-wolfssl=$(STAGING_DIR)/usr
+LIBCURL_CONF_OPTS += --with-ca-bundle=/etc/ssl/certs/ca-certificates.crt
 LIBCURL_DEPENDENCIES += wolfssl
 else
 LIBCURL_CONF_OPTS += --without-wolfssl