[gnutls-devel] GnuTLS | lib/system/certs.c: Add support for SSL_CERT_DIR, SSL_CERT_FILE (!1541)

[Read-only notification of GnuTLS library development activities]

Ryan Sundberg commented on a discussion on lib/system/certs.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1541#note_852814072

>  	return 0;
>  }
>  
> -#if defined(DEFAULT_TRUST_STORE_FILE) || (defined(DEFAULT_TRUST_STORE_PKCS11) && defined(ENABLE_PKCS11))
> +#if defined(DEFAULT_TRUST_STORE_DIR) || defined(DEFAULT_TRUST_STORE_FILE) \
> +	|| (defined(DEFAULT_TRUST_STORE_PKCS11) && defined(ENABLE_PKCS11)) \
> +	|| defined(ANDROID) || defined(__ANDROID__)
> +
> +# include <dirent.h>
> +# include <unistd.h>
> +
> +# if defined(ANDROID) || defined(__ANDROID__)
> +#  define DEFAULT_TRUST_STORE_DIR "/system/etc/security/cacerts/"

Hi @dueno. Good idea. I cleaned it up so it only checks for ANDROID once at the top, and added new #defines for the REVOKE cert dir that android uses.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1541#note_852814072
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20220223/7208ad60/attachment.html>