Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)
1From 321401098f2c86a6f68e186cfc06e030b09484b6 Mon Sep 17 00:00:00 2001 2From: Tyson Whitehead <twhitehead@gmail.com> 3Date: Fri, 29 Jun 2018 15:47:00 -0400 4Subject: [PATCH] Respect NIX_SSL_CERT_FILE and SSL_CERT_FILE (in that order) 5 6--- 7 lib/LWP/Protocol/https.pm | 8 ++++++++ 8 1 file changed, 8 insertions(+) 9 10diff --git a/lib/LWP/Protocol/https.pm b/lib/LWP/Protocol/https.pm 11index f7230e2..c78b9ce 100644 12--- a/lib/LWP/Protocol/https.pm 13+++ b/lib/LWP/Protocol/https.pm 14@@ -23,6 +23,14 @@ sub _extra_sock_opts 15 $ssl_opts{SSL_verify_mode} = 0; 16 } 17 if ($ssl_opts{SSL_verify_mode}) { 18+ unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path}) { 19+ $ssl_opts{SSL_ca_file} = $ENV{'NIX_SSL_CERT_FILE'} 20+ if !defined $ssl_opts{SSL_ca_file}; 21+ $ssl_opts{SSL_ca_file} = $ENV{'SSL_CERT_FILE'} 22+ if !defined $ssl_opts{SSL_ca_file}; 23+ $ssl_opts{SSL_ca_file} = "/etc/ssl/certs/ca-certificates.crt" 24+ if !defined $ssl_opts{SSL_ca_file} && -e "/etc/ssl/certs/ca-certificates.crt"; 25+ } 26 unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path}) { 27 eval { 28 require Mozilla::CA; 29-- 302.14.0 31