Hello.
Tijl Coosemans wrote on 2022/08/13 18:51:
> Try this patch for p11-kit. If it works you can file a bug against
> p11-kit, because I believe ports are supposed to move away from
> ca_root_nss.
>
> --- a/security/p11-kit/Makefile
> +++ b/security/p11-kit/Makefile
> @@ -25,7 +25,7 @@ MESON_ARGS= -Dbash_completion=enabled \
> -Dlibffi=enabled \
> -Dnls=false \
> -Dtrust_module=enabled \
> - -Dtrust_paths=${LOCALBASE}/share/certs/ca-root-nss.crt
> + -Dtrust_paths=/etc/ssl/certs
>
> OPTIONS_DEFINE= DOCS MANPAGES TEST
> OPTIONS_SUB= yes
When
./configure
--with-trust-paths=/usr/local/share/certs/ca-root-nss.crt:/etc/ssl/certs
is used, TRUST_PATHS is defined as
"/usr/local/share/certs/ca-root-nss.crt:/etc/ssl/certs" in ${WRKSRC}/config.h.
When meson, TRUST_PATHS is defined in ${WRKSRC}/_build/config.h as defined by
MESON_ARGS=-Dtrust_paths=${LOCALBASE}/share/certs/ca-root-nss.crt:/etc/ssl/certs.
Since these would be the same value, why not just specify multiple paths in
meson, separated by a colon?
Also, is there something wrong with omitting ca-root-nss.crt filename, since
the directories seem to be handled properly?
Regards.
