gnustep/libs-base
0
0
Fork 0
mirror of https://github.com/gnustep/libs-base.git synced 2025-04-23 09:04:13 +00:00
Code Issues Projects Releases Packages Wiki Activity

Honor SSL_CERT_FILE environment vartiable

Browse source
This commit is contained in:
Richard Frith-Macdonald 2022-10-20 10:24:42 +01:00
parent 0ca9110ef5
commit 09a9a8fe5b
3 changed files with 16 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
ChangeLog
View file

@ -1,3 +1,11 @@
2022-10-20 Richard Frith-Macdonald <rfm@gnu.org>
* Resources/GSTLS/README:
* Source/GSTLS.m:
Honor the SSL_CERT_FILE environment variable (for OpenSSL
compatibility) if our own user default or environment variable
is not used.
2022-10-18 Richard Frith-Macdonald <rfm@gnu.org>
* Source/GSHTTPURLHandle.m: Track whether we have read any data from

5
Resources/GSTLS/README
View file

@ -3,8 +3,9 @@ Files here are the fallbacks for TLS/SSL certificate verification.
To find the certificate authority certificates the system looks in:
The path specified by GSTLSCAFile (if that user default is defined),
otherwise the path specified in the GS_TLS_CA_FILE environment variable
if it is defined, otherwise the file GSTLS/ca-certificates.crt in the
otherwise the path specified in the GS_TLS_CA_FILE environment variable if
it is defined, otherwise the path specified in the SSL_CERT_FILE environment
variable if it is defined, otherwise the file GSTLS/ca-certificates.crt in the
base library resource bundle.
Similarly to find the revoke file, the order of precedence of configuration

5
Source/GSTLS.m
View file

@ -225,8 +225,13 @@ static NSMutableDictionary *fileMap = nil;
{
/* Let the GS_TLS_CA_FILE environment variable override the
* default certificate authority location.
* Failing that, use the same environment variable as OpenSSL
*/
str = [env objectForKey: @"GS_TLS_CA_FILE"];
if (nil == str)
{
str = [env objectForKey: @"SSL_CERT_FILE"];
}
if (nil == str)
{
str = [bundle pathForResource: @"ca-certificates"