Cyril Brulebois <[email protected]> (2017-02-15):
> I should clarify a bit: we can't look at PROTOCOL at this point, since a
> netinst with mirror/protocol=https is going to use local files on the
> cdrom; if it was using https, debootstrap would do the job already
> (except it would fail to load both packages right now since Steve only
> added them to the images a few hours ago).

Eww, we have this code right now already:
|       # If we need SSL certificates, copy them in now.
|       if [ "$PROTOCOL" = "https" ] && [ -d /etc/ssl/certs ]; then
|               if find /etc/ssl/certs/ -name \*.crt | grep -q .; then
|                       mkdir -p /target/usr/local/share/ca-certificates
|                       cp -a /etc/ssl/certs/*.crt 
/target/usr/local/share/ca-certificates/
|                       chroot /target update-ca-certificates || true
|               fi
|       fi

→ It's likely not getting run with netinst images…

I think I'll file this as another bug report for reference.


KiBi.

Attachment: signature.asc
Description: Digital signature

Reply via email to