[Bug 221538] ftp/linux-c7-curl: curl: (77) Problem with the SSL CA cert (path? access rights?)

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221538

--- Comment #5 from David Naylor <dbn at FreeBSD.org> ---
With the update to CentOS 7 we now have a new problem:
curl -v https://api.nuget.org/v3/index.json
* About to connect() to api.nuget.org port 443 (#0)
*   Trying 93.184.221.200...
* Connected to api.nuget.org (93.184.221.200) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* Unable to initialize NSS database
* Initializing NSS with certpath: none
* WARNING: failed to load NSS PEM library libnsspem.so. Using OpenSSL PEM
certificates will not work.
* Closing connection 0
curl: (77) Problem with the SSL CA cert (path? access rights?)

I've got a patch for this issue which I will post to Phabricator tomorrow(tm).  

Regarding the underlying issue of SSL CA certificates not being installed for
linux-curl, how should we solve this?  I think using ca-certificates is a
duplicate of ca_root_nss and that we should either a) do nothing, or b) add a
pkg-message to nss(?) indicating the step required to get certificates to work?

-- 
You are receiving this mail because:
You are the assignee for the bug.