summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCzarnowski, Przemyslaw <przemyslaw.hawrylewicz.czarnowski@intel.com>2020-07-20 16:33:23 +0300
committerCzarnowski, Przemyslaw <przemyslaw.hawrylewicz.czarnowski@intel.com>2020-07-20 16:37:06 +0300
commit0d65aa179dea3670b9fe46000abc705a1447ffe9 (patch)
tree8f443fe30bdacc4d88c94443876037ba44e4fe6a
parentd113e4284674d112aff0744fe734581bd3fc4abf (diff)
downloadvirtual-media-0d65aa179dea3670b9fe46000abc705a1447ffe9.tar.xz
Provide nbdkit with path to CA certificates
OpenBMC uses custom path for certificates: /etc/ssl/certs not /usr/lib/ssl/certs like curl plugin default. We need to provide it in order to make curl plugin work in OpenBMC environment. Tested: Certificate Authority added with UI allows to use https server signed with this certificate. Change-Id: I702179862e9e977efd162bdf19426208c4ce45f0 Signed-off-by: Czarnowski, Przemyslaw <przemyslaw.hawrylewicz.czarnowski@intel.com>
-rw-r--r--src/state/activating_state.cpp4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/state/activating_state.cpp b/src/state/activating_state.cpp
index 6192711..3f852c7 100644
--- a/src/state/activating_state.cpp
+++ b/src/state/activating_state.cpp
@@ -240,7 +240,9 @@ std::unique_ptr<resource::Process>
std::vector<std::string> params = {// Use curl plugin ...
"curl",
// ... to mount http resource at url
- "url=" + url};
+ "url=" + url,
+ // custom OpenBMC path for CA
+ "capath=/etc/ssl/certs/authority"};
// Authenticate if needed
if (machine.getTarget()->credentials)