[oe-commits] [openembedded-core] 03/07: gnutls: Use ca-certificates as default trust store file

[git at git.openembedded.org]

This is an automated email from the git hooks/post-receive script.

rpurdie pushed a commit to branch master-next
in repository openembedded-core.

commit 7261fb1a44bebf1b87b83e5eed6ee356f9b256e1
Author: Philippe Normand <philn at igalia.com>
AuthorDate: Fri May 31 09:44:40 2019 +0100

    gnutls: Use ca-certificates as default trust store file
    
    Since version 2.58 the glib-networking TLS database relies on GnuTLS's system
    trust store, so not enabling it leads to TLS errors in applications depending on
    glib-networking. The raised runtime warning is:
    
    process:500): GLib-Net-WARNING **: 09:14:09.321: Failed to load TLS database: Failed to load system trust store: GnuTLS was not configured with a system trust
    (app:490): ... TLS Error: TLS certificate  has unknown CA.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
---
 meta/recipes-support/gnutls/gnutls_3.6.7.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-support/gnutls/gnutls_3.6.7.bb b/meta/recipes-support/gnutls/gnutls_3.6.7.bb
index e05dc2b..01dd23c 100644
--- a/meta/recipes-support/gnutls/gnutls_3.6.7.bb
+++ b/meta/recipes-support/gnutls/gnutls_3.6.7.bb
@@ -44,6 +44,7 @@ EXTRA_OECONF = " \
     --enable-local-libopts \
     --enable-openssl-compatibility \
     --with-libpthread-prefix=${STAGING_DIR_HOST}${prefix} \
+    --with-default-trust-store-file=/etc/ssl/certs/ca-certificates.crt \
 "
 
 LDFLAGS_append_libc-musl = " -largp"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.