openssl: add ca-certificates dep

openssl: add ca-certificates dep

[Yaakov (Cygwin/X)]

Corinna,

Now that ca-certificates provides /usr/ssl/cert.pem[1][2], which is the 
hardcoded location in libcrypto, AFAICS libopenssl100 should depend on 
ca-certificates.  Note that Fedora does this as well[3], as do our 
libgnutls28 and libnss3 packages.  This would assure that e.g. 
wget.x86_64 works OOTB with HTTPS URIs.

This can be fixed for future releases by adding ca-certificates to 
libopenssl100_REQUIRES, but this should be added to 
x86*/release/openssl/libopenssl100/setup.hint now.  Agreed?


Yaakov

[1] http://cygwin.com/ml/cygwin/2013-09/msg00161.html
[2] http://cygwin.com/ml/cygwin-announce/2013-10/msg00007.html
[3] http://pkgs.fedoraproject.org/cgit/openssl.git/tree/openssl.spec#n107

Re: openssl: add ca-certificates dep

[Corinna Vinschen]

[-- Attachment #1: Type: text/plain, Size: 886 bytes --]

On Feb  5 02:03, Yaakov (Cygwin/X) wrote:
> Corinna,
> 
> Now that ca-certificates provides /usr/ssl/cert.pem[1][2], which is
> the hardcoded location in libcrypto, AFAICS libopenssl100 should
> depend on ca-certificates.  Note that Fedora does this as well[3],
> as do our libgnutls28 and libnss3 packages.  This would assure that
> e.g. wget.x86_64 works OOTB with HTTPS URIs.
> 
> This can be fixed for future releases by adding ca-certificates to
> libopenssl100_REQUIRES, but this should be added to
> x86*/release/openssl/libopenssl100/setup.hint now.  Agreed?

Yes.  I changed the existing setup.hint files on sourceware already
and the next openssl package will have the deps automatically.


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: Type: application/pgp-signature, Size: 819 bytes --]