Re: pkg/58144: SSLCERTBUNDLE isn't set reliably for clean builds or cross-builds

[gnats-admin%netbsd.org@localhost]

The following reply was made to PR pkg/58144; it has been noted by GNATS.

From: Taylor R Campbell <riastradh%NetBSD.org@localhost>
To: gnats-bugs%NetBSD.org@localhost, pkgsrc-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/58144: SSLCERTBUNDLE isn't set reliably for clean builds or cross-builds
Date: Tue, 27 Aug 2024 15:11:36 +0000

 SSLCERTBUNDLE is also set wrong on NetBSD altogether!
 
 In NetBSD>=10 base, or in NetBSD<10 with mozilla-rootcerts, the
 concatenated pem bundle is at
 
 /etc/openssl/certs/ca-certificates.crt
 
 but security/openssl/builtin.mk only looks at
 
 ${SSLDIR}/certs/ca-bundle.crt
 
 where SSLDIR=/etc/openssl on NetBSD.
 
 I don't know which systems use ca-bundle.crt, but we should probably
 arrange to set SSLCERTBUNDLE=/etc/openssl/certs/ca-certificates.crt on
 NetBSD>=10 by default.