CVS commit: pkgsrc/security/gnutls

["Leonardo Taccari" <leot%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   leot
Date:           Thu Dec 13 00:10:12 UTC 2018

Modified Files:
        pkgsrc/security/gnutls: Makefile

Log Message:
gnutls: Add a dependency to mozilla-rootcerts and configure to use them

Without providing `--with-default-trust-store-file=' configure
argument gnutls try to check a list of hardcoded paths for the
trust store file and use the first found.

If none of them is found gnutls_certificate_set_x509_system_trust()
returns GNUTLS_E_UNIMPLEMENTED_FEATURE and the location of trust
store file should be provided (e.g. in gnutls-cli via --x509cafile
option).

Depends on mozilla-rootcerts and pass `--with-default-trust-store-file='
similarly to security/p11-kit to always have a consistent default
trust store file and an implemented
gnutls_certificate_set_x509_system_trust().

Bump PKGREVISION


To generate a diff of this commit:
cvs rdiff -u -r1.192 -r1.193 pkgsrc/security/gnutls/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/gnutls/Makefile
diff -u pkgsrc/security/gnutls/Makefile:1.192 pkgsrc/security/gnutls/Makefile:1.193
--- pkgsrc/security/gnutls/Makefile:1.192       Sun Dec  9 20:12:41 2018
+++ pkgsrc/security/gnutls/Makefile     Thu Dec 13 00:10:12 2018
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.192 2018/12/09 20:12:41 leot Exp $
+# $NetBSD: Makefile,v 1.193 2018/12/13 00:10:12 leot Exp $
 
 DISTNAME=      gnutls-3.6.5
+PKGREVISION=   1
 CATEGORIES=    security devel
 MASTER_SITES=  ftp://ftp.gnutls.org/gcrypt/gnutls/v3.6/
 EXTRACT_SUFX=  .tar.xz
@@ -10,6 +11,8 @@ HOMEPAGE=     http://www.gnutls.org/
 COMMENT=       GNU Transport Layer Security library
 LICENSE=       gnu-gpl-v3 AND gnu-lgpl-v2.1
 
+DEPENDS+=      mozilla-rootcerts-[0-9]*:../../security/mozilla-rootcerts
+
 USE_LANGUAGES=                 c c++
 USE_LIBTOOL=                   yes
 USE_PKGLOCALEDIR=              yes
@@ -22,6 +25,7 @@ CONFIGURE_ARGS+=              --disable-libdane
 CONFIGURE_ARGS+=               --without-idn
 CONFIGURE_ARGS+=               --without-tpm
 CONFIGURE_ARGS+=               --disable-valgrind-tests
+CONFIGURE_ARGS+=               --with-default-trust-store-file=${PREFIX}/share/mozilla-rootcerts/cacert.pem
 CONFIGURE_ARGS+=               --with-libintl-prefix=${BUILDLINK_PREFIX.gettext}
 CONFIGURE_ARGS+=               --enable-local-libopts
 # Assembler support is broken for SunOS in 3.2.9.