From c29660ff2c0b2606097fdc6ada645527052dafb1 Mon Sep 17 00:00:00 2001 From: Dimitar Tomov Date: Sun, 5 Jun 2022 15:47:49 +0300 Subject: [PATCH] package/libcurl: fix missing CA bundle when wolfssl is SSL/TLS provider Without CA bundle curl can not verify the remote peer and work with https. This is fixed by adding a config option pointing to the default location for CA bundle in buildroot. Alternatives like OpenSSL and MbedTLS use the same path, however the wolfSSL build options for libcurl did not include this path until now. Signed-off-by: Dimitar Tomov Signed-off-by: Yann E. MORIN (cherry picked from commit b4d301c6413074ba88be2625305631524476f417) Signed-off-by: Peter Korsgaard --- package/libcurl/libcurl.mk | 1 + 1 file changed, 1 insertion(+) diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk index 15943f7512..11f1e4de59 100644 --- a/package/libcurl/libcurl.mk +++ b/package/libcurl/libcurl.mk @@ -77,6 +77,7 @@ endif ifeq ($(BR2_PACKAGE_LIBCURL_WOLFSSL),y) LIBCURL_CONF_OPTS += --with-wolfssl=$(STAGING_DIR)/usr +LIBCURL_CONF_OPTS += --with-ca-bundle=/etc/ssl/certs/ca-certificates.crt LIBCURL_DEPENDENCIES += wolfssl else LIBCURL_CONF_OPTS += --without-wolfssl