Kodi doesn't set the CAPATH and CAINFO parameters for libcurl. To make HTTPS connections work we can set them based on SSL_CERT_DIR and SSL_CERT_FILE. --- a/xbmc/filesystem/CurlFile.cpp +++ b/xbmc/filesystem/CurlFile.cpp @@ -626,8 +626,12 @@ if (!m_cipherlist.empty()) g_curlInterface.easy_setopt(h, CURLOPT_SSL_CIPHER_LIST, m_cipherlist.c_str()); + // Load certificate data from environment paths + g_curlInterface.easy_setopt(m_state->m_easyHandle, CURLOPT_CAPATH, getenv("SSL_CERT_DIR")); + g_curlInterface.easy_setopt(m_state->m_easyHandle, CURLOPT_CAINFO, getenv("SSL_CERT_FILE")); + if (CServiceBroker::GetSettingsComponent()->GetAdvancedSettings()->m_curlDisableHTTP2) g_curlInterface.easy_setopt(h, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1); else // enable HTTP2 support. default: CURL_HTTP_VERSION_1_1. Curl >= 7.62.0 defaults to CURL_HTTP_VERSION_2TLS g_curlInterface.easy_setopt(h, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_2TLS); tr>
aboutsummaryrefslogtreecommitdiff
path: root/etc/disarchive-manifest.scm
AgeCommit message (Expand)Author
2022-08-06disarchive-manifest: Exclude the Chromium tarball....* etc/disarchive-manifest.scm (disarchive-collection): Exclude "chromium-" tarballs. Ludovic Courtès
2022-08-05disarchive-manifest: Filter out origins without a hash....* etc/disarchive-manifest.scm (disarchive-collection): Filter out origins with a phony hash. Ludovic Courtès
2022-08-05disarchive-manifest: Handle tar.xz archives....* etc/disarchive-manifest.scm (tarball-origin?): Add ".tar.xz". Ludovic Courtès
2021-10-09disarchive-manifest: Provide valid 'version' string....* etc/disarchive-manifest.scm <top level>: Turn 'version' field into a string. Ludovic Courtès
2021-09-14etc: Add 'disarchive-manifest.scm'....* etc/disarchive-manifest.scm: New file. * Makefile.am (EXTRA_DIST): Add it. Ludovic Courtès