From 1f5bcb57707224bb2810780258bdcff57d05c464 Mon Sep 17 00:00:00 2001
From: Alejandro Mery <amery@geeks.cl>
Date: Tue, 23 Mar 2010 20:20:50 -0400
Subject: [PATCH] curl: changed to not set a default bundle, and set to use
 /etc/ssl/certs as default CApath

---
 network/curl/curl.conf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/network/curl/curl.conf b/network/curl/curl.conf
index 039115025..a1b05abc1 100644
--- a/network/curl/curl.conf
+++ b/network/curl/curl.conf
@@ -17,3 +17,11 @@
 if [ "$SDECFG_STATIC" = "1" ] ; then
 	var_insert confopt " " "--disable-shared"
 fi
+
+# we don't have a bundle, it can't be disabled on runtime
+# and if it's empty it fails to verify anything regardless
+# the capath
+var_append extraconfopt ' ' '--without-ca-bundle'
+if pkginstalled openssl; then
+	var_append extraconfopt ' ' '--with-ca-path=/etc/ssl/certs'
+fi