pkg and https-based repo with self-signed cert

Kurt Jaeger lists at opsec.eu
Thu Feb 5 21:18:15 UTC 2015


Hi!

> >> How do I get pkg to accept a self-signed cert if the repo is running
> >> under https ?

> > man 3 fetch says
> > 
> > export SSL_NO_VERIFY_PEER=1

To be more exact:

cd /usr/local/etc/
cp pkg.conf.sample pkg.conf
vi pkg.conf
-------------
PKG_ENV : {
        SSL_NO_VERIFY_PEER: 1
}
-------------

will do this without the explicit environment variable.

> That will accept *any* cert, not certain if that's what you want
> (depends on your use case).

Well, it's not perfect, but it's good enough for now.

> You can set environment variables in pkg.conf (PKG_ENV if I
> remember correctly)

Yes, that helped. I had to copy the syntax from the pkg.conf.sample
with the ALIASes.

-- 
pi at opsec.eu            +49 171 3101372                         5 years to go !


More information about the freebsd-ports mailing list