Re: GnuTLS and the “trust store”

[Ricardo Wurmus]

Ludovic Courtès <address@hidden> writes:

>> I'm trying to understand the problem here, the problem why
>> packages like darcs, pbpst, and others are just sitting, waiting
>> for months because of issues with cURL.
>
> What is “these issues with cURL”?  It builds fine, and it’s perfectly
> usable as long as /etc/ssl/certs is populated.

I still think that we ought to patch libcurl such that it checks the
environment variable CURL_CA_BUNDLE.  NixOS used to do this in the past,
IIRC.

It’s an easy fix and allows us to solve the problem at the root instead
of trying to come up with a fix for every user of libcurl.

~~ Ricardo