From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wm1-x32c.google.com (mail-wm1-x32c.google.com [IPv6:2a00:1450:4864:20::32c]) by sourceware.org (Postfix) with ESMTPS id 3455E389041B for ; Mon, 12 Jul 2021 16:16:06 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 3455E389041B Received: by mail-wm1-x32c.google.com with SMTP id j34so11772990wms.5 for ; Mon, 12 Jul 2021 09:16:06 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:in-reply-to:references:date :message-id:mime-version; bh=PinlpZtxWNbh+8p+T2hjZrtiOU1xX0WrnxIDHbtquTg=; b=etI8q2YQtVxIm1A0D+sGIWDed1ohIDV1mza3BjeOQQDOo2dKlxs1p7HfSjMo07EvcW JHHZJpsTTOzTrYr2B5+s6KIXW/7OsC2KWKq9evoz7T+q50DhtPi3YuCOrDv9AgME/Msm bs9qLZJblQD7lPRpZtyWYKWksKtgLlqSqvp5b/hBDSYcqmNsCSU8Topijt2j2Ura56T0 fPGh8RsM+73ki9HO7ZQEC5v9XO8leSAwyt3IHaXjNaVIjjYvTb3537ZbC2KmFKnUQYlM kabOIwEKFUMr+LGdW2CfRbfhj0zByaaSKj3OWumH5EkkXLGSvkmHy24TZEzooPcGltmH n7xw== X-Gm-Message-State: AOAM533RJTpeS/h4ZlGtnjFN9PQVqlzu9BG5e8U4Sow+ENZC4ErHsQAX qWmsosK0cTZw8nCq37GRJ9+sjnCgpUKenOpwMb/ylNrnA5Gj5S1aXzZSby4h2msh0Ba20DhHhj9 AcVoMRY4gwjgzfKcvMc4Hxu3RXZfMtki+6jxi8yCLFNOmBLfuXQYVNJXZtwnfcDi0Vfm7Ag== X-Google-Smtp-Source: ABdhPJx4HCFoU7FUZXl2EKwPQ5J/1i91cZask2Qu9Tc/eZfcwgbU9WKZSO3v32STCAaNGu3RDUL1PA== X-Received: by 2002:a7b:c20e:: with SMTP id x14mr25480629wmi.93.1626106565252; Mon, 12 Jul 2021 09:16:05 -0700 (PDT) Received: from bucheron-thinkpad (cpc120850-nrwh12-2-0-cust139.4-4.cable.virginm.net. [82.32.180.140]) by smtp.gmail.com with ESMTPSA id k5sm13966851wmk.11.2021.07.12.09.16.04 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Jul 2021 09:16:04 -0700 (PDT) From: Magne Hov To: "Frank Ch. Eigler" Cc: elfutils-devel@sourceware.org Subject: Re: Specifying CA certificates for libdebuginfod In-Reply-To: <20210528183110.GB15224@redhat.com> References: <5sr1hqwyjy.fsf@undo.io> <20210528183110.GB15224@redhat.com> Date: Mon, 12 Jul 2021 17:16:03 +0100 Message-ID: <5sfswj8q4c.fsf@undo.io> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Status: No, score=-5.5 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: elfutils-devel@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Elfutils-devel mailing list List-Unsubscribe: , List-Archive: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Jul 2021 16:16:09 -0000 Thank you for your reply, and apologies about getting back to you so late. On Fri, May 28 2021, Frank Ch. Eigler wrote: > Hi - > > On Fri, May 28, 2021 at 06:36:17PM +0100, Magne Hov via Elfutils-devel wrote: >> [...] >> Other components that my application uses already have ways of >> specifying a certificate bundle. [...] >> There is also an option of recognising CURL_CA_BUNDLE as that >> environment variable is already established by the curl tool, but it >> could also be good to keep the name separate to libdebuginfod. > > Sure; I have no strong opinion on this. ISTM of no particular > advantage to invent a debuginfod-oriented env var for this, > as opposed to reusing "CURL_CA_BUNDLE" (but not "SSL_CERT_DIR" > or "SSL_CERT_FILE", right?). The exact name of the environment variable is not important to me. I have no problem reusing "CURL_CA_BUNDLE". I wanted to share my patch in case other people found it useful, but for the time being I'm content with patching my own builds. I'm also not sure what the best approach is for deciding on a name for this environment variable. It might be best to leave this issue until the feature is potentially wanted by more users? > > - FChE