From 0d65aa179dea3670b9fe46000abc705a1447ffe9 Mon Sep 17 00:00:00 2001
From: "Czarnowski, Przemyslaw" <przemyslaw.hawrylewicz.czarnowski@intel.com>
Date: Mon, 20 Jul 2020 15:33:23 +0200
Subject: Provide nbdkit with path to CA certificates

OpenBMC uses custom path for certificates: /etc/ssl/certs not
/usr/lib/ssl/certs like curl plugin default. We need to provide it in
order to make curl plugin work in OpenBMC environment.

Tested:
Certificate Authority added with UI allows to use https server signed
with this certificate.

Change-Id: I702179862e9e977efd162bdf19426208c4ce45f0
Signed-off-by: Czarnowski, Przemyslaw <przemyslaw.hawrylewicz.czarnowski@intel.com>
---
 src/state/activating_state.cpp | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/state/activating_state.cpp b/src/state/activating_state.cpp
index 6192711..3f852c7 100644
--- a/src/state/activating_state.cpp
+++ b/src/state/activating_state.cpp
@@ -240,7 +240,9 @@ std::unique_ptr<resource::Process>
     std::vector<std::string> params = {// Use curl plugin ...
                                        "curl",
                                        // ... to mount http resource at url
-                                       "url=" + url};
+                                       "url=" + url,
+                                       // custom OpenBMC path for CA
+                                       "capath=/etc/ssl/certs/authority"};
 
     // Authenticate if needed
     if (machine.getTarget()->credentials)
-- 
cgit v1.2.3