Skip to content

Commit

Permalink
Update of locations to search for default root CA file
Browse files Browse the repository at this point in the history
The previous list didn't cover some popular platforms such as
Fedora/RHEL/CentOS.  New list adapted from
<https://go.dev/src/crypto/x509/root_linux.go>.
  • Loading branch information
petere committed Feb 25, 2022
1 parent e088c9c commit fb65721
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion m4/usual.m4
Original file line number Diff line number Diff line change
Expand Up @@ -430,7 +430,14 @@ if test "$tls_support" = "auto" -o "$tls_support" = "libssl"; then
fi
])
if test "$cafile" = "auto"; then
for cafile in /etc/ssl/certs/ca-certificates.crt /etc/ssl/cert.pem; do
for cafile in \
/etc/ssl/certs/ca-certificates.crt \
/etc/pki/tls/certs/ca-bundle.crt \
/etc/ssl/ca-bundle.pem \
/etc/pki/tls/cacert.pem \
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem \
/etc/ssl/cert.pem
do
if test -f "$cafile"; then
break
fi
Expand Down

0 comments on commit fb65721

Please sign in to comment.