[OE-core] [PATCH] gnutls: Add a config option to enable the pkcs11 trust store

[Adrian Bunk]

On Thu, May 30, 2019 at 02:30:14PM +0100, Philippe Normand wrote:
> Hi Adrian,

Hi Philippe,

> On Thu, 2019-05-30 at 15:17 +0300, Adrian Bunk wrote:
>...
> > 2. Wouldn't the more common case be to use the ca-certificates
> > package instead of PKCS #11?
> 
> I don't know why glib-networking needs to go through gnutls which then 
> needs to query p11-kit. I suppose p11-kit could directly be used, but 
> this is not my call to make.
>...

I think your "which then needs to query p11-kit" is not correct.

My reading of configure.ac is that ca-certificates could be used
instead, and this also makes a lot more sense in the default case.

> Philippe

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed