From ba22f5dc4ef807b2e7e83f27b3836c3ca468c6f8 Mon Sep 17 00:00:00 2001
From: Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
Date: Sat, 12 Sep 2020 12:11:07 +0000
Subject: Use built-in CA store of OpenSSL/GnuTLS when CA_BUNDLE is disabled

PR:		248047
Reported by:	Michael Osipov <michael.osipov@siemens.com>
Submitted by:	kevans
---
 ftp/curl/Makefile | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'ftp')

diff --git a/ftp/curl/Makefile b/ftp/curl/Makefile
index 1440716e910d..4beb514eafb5 100644
--- a/ftp/curl/Makefile
+++ b/ftp/curl/Makefile
@@ -140,6 +140,10 @@ WOLFSSL_LIB_DEPENDS=	libwolfssl.so:security/wolfssl
 
 .include <bsd.port.pre.mk>
 
+.if !${PORT_OPTIONS:MCA_BUNDLE} && (${PORT_OPTIONS:MGNUTLS} || ${PORT_OPTIONS:MOPENSSL})
+CONFIGURE_ARGS+=--with-ca-fallback
+.endif
+
 .if ((!${PORT_OPTIONS:MGNUTLS} && !${PORT_OPTIONS:MOPENSSL}) || (${PORT_OPTIONS:MOPENSSL} && ${SSL_DEFAULT:Mlibressl*})) && ${PORT_OPTIONS:MTLS_SRP}
 IGNORE=		only supports TLS-SRP with either OpenSSL or GnuTLS
 .endif
-- 
cgit v1.2.3