gnurl: Use --with-ca-fallback to automatically pickup gnutls CA certificates

[ng0 <ng0%n0.is@localhost>]

Module Name:	pkgsrc-wip
Committed By:	ng0 <ng0%n0.is@localhost>
Pushed By:	ng0
Date:		Mon Jan 21 18:45:38 2019 +0000
Changeset:	fc657de8b575dfbb9abe4049bbbca1c0637d847a

Modified Files:
	gnurl/Makefile

Log Message:
gnurl: Use --with-ca-fallback to automatically pickup gnutls CA certificates

Avoid to include openssl bl3 for SSLCERTS, pass --without-ca-{bundle,path}
to avoid possible automagically (and difficult to predict) CA
bundle/paths pick ups and just fallback to preferred gnutls ones
(supported since gnutls-3.6.5nb1).

Patch by Leonardo Taccari.

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=fc657de8b575dfbb9abe4049bbbca1c0637d847a

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 gnurl/Makefile | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diffs:
diff --git a/gnurl/Makefile b/gnurl/Makefile
index 51d92d2ec3..92bf23c52e 100644
--- a/gnurl/Makefile
+++ b/gnurl/Makefile
@@ -27,12 +27,13 @@ TEST_TARGET=		check
 CONFIGURE_ARGS+=	--with-zlib=${BUILDLINK_PREFIX.zlib}
 CONFIGURE_ARGS+=	--disable-ntml-wb
 CONFIGURE_ARGS+=	--enable-ipv6
-# We need this for gnurl to know the certificate location out of the box
-CONFIGURE_ARGS+=	--with-ca-path=${SSLCERTS}
-# CONFIGURE_ARGS+=	--with-ssl=${BUILDLINK_PREFIX.openssl}
 # Optionally, We want GnuTLS with Dane.
 CONFIGURE_ARGS+=	--with-gnutls
 CONFIGURE_ARGS+=	--with-libidn2
+# Fallback to gnutls preferred CA certificates
+CONFIGURE_ARGS+=	--without-ca-bundle
+CONFIGURE_ARGS+=	--without-ca-path
+CONFIGURE_ARGS+=	--with-ca-fallback
 # Do not pick up GSS, should be fixed in upstream.
 CONFIGURE_ARGS+=	--without-gssapi
 
@@ -46,7 +47,6 @@ post-install:
 .include "../../devel/libidn2/buildlink3.mk"
 .include "../../security/gnutls/libgnutls-config.mk"
 .include "../../security/gnutls/buildlink3.mk"
-.include "../../security/openssl/buildlink3.mk"
 .include "../../devel/gettext-lib/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"