copy CA certificates to jail

for curl >= 8.3.0 which removed the nss backend, requiring the
certs with the OpenSSL backend.

DeepL access doesn't work otherwise.

Use the same list and order as used in core:

see: similar to https://gerrit.libreoffice.org/c/core/+/158915
and: https://www.happyassassin.net/posts/2015/01/12/a-note-about-ssltls-trusted-certificate-stores-and-platforms/
Signed-off-by: Caolán McNamara <caolan.mcnamara@collabora.com>
Change-Id: Ic9de1e926977f63592146ac17df42704c8d86ccd
This commit is contained in:
Caolán McNamara 2023-11-14 13:13:43 +00:00 committed by Caolán McNamara
parent 4dfe164f3f
commit 35fd4bb744

View file

@ -65,6 +65,14 @@ find etc/fonts \
usr/lib/*/libsqlite* \
-type l 2>/dev/null
# Find the first of these that exist to fulfill ssltls
# via openssl requirements
find etc/pki/tls/certs/ca-bundle.crt \
etc/pki/tls/certs/ca-bundle.trust.crt \
etc/ssl/certs/ca-certificates.crt \
var/lib/ca-certificates/ca-bundle.pem \
-type l,f -print -quit 2>/dev/null
# Go through the LO shared objects and check what system libraries
# they link to.
find $INSTDIR -name 'xpdfimport' |