git: Disable cert verification for pkg-bootstrap when no cert.pem

Aaron LI aly at crater.dragonflybsd.org
Thu Jul 12 01:46:14 PDT 2018


commit eae13f14bc173e25f89316687afcc60dbd1fc5b0
Author: Aaron LI <aly at aaronly.me>
Date:   Thu Jul 12 11:38:48 2018 +0800

    Disable cert verification for pkg-bootstrap when no cert.pem
    
    Our site uses HTTPs and fetch(1) requires /etc/ssl/cert.pem or
    /usr/local/etc/ssl/cert.pem to verify the server's certificate.
    However, when one needs to bootstrap the 'pkg', that cert.pem
    generally doesn't exist since it is installed by the ca_root_nss
    package.  So disable certificate verification for fetch(1) in
    such a case.
    
    Split out 'pkg-bootstrap-{fetch,install}' targets to get rid of
    some duplicate codes.

Summary of changes:
 etc/Makefile.usr | 41 ++++++++++++++++++++++++-----------------
 1 file changed, 24 insertions(+), 17 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/eae13f14bc173e25f89316687afcc60dbd1fc5b0


-- 
DragonFly BSD source repository



More information about the Commits mailing list