[PR PATCH] p11-kit: use system ca certificates as input for trust module

[PR PATCH] p11-kit: use system ca certificates as input for trust module

[voidlinux-github]

[-- Attachment #1: Type: text/plain, Size: 654 bytes --]

There is a new pull request by steinex against master on the void-packages repository

https://github.com/steinex/void-packages p11-kit
https://github.com/void-linux/void-packages/pull/11492

p11-kit: use system ca certificates as input for trust module
To date p11-kit was built with `--without-trust-paths` which means that p11-kit was not feeded with the systems CAs and presented an empty store when queried.

This broke applications distributed via flatpak, which uses p11-kit to query the hosts available CAs and make them available inside the sandboxes.

A patch file from https://github.com/void-linux/void-packages/pull/11492.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-p11-kit-11492.patch --]
[-- Type: application/text/x-diff, Size: 900 bytes --]

From 2c9ad54ed89088a293f18b4f953eaa550c947218 Mon Sep 17 00:00:00 2001
From: Frank Steinborn <steinex@nognu.de>
Date: Sat, 4 May 2019 19:33:10 +0200
Subject: [PATCH] p11-kit: use system ca certificates as input for trust module

---
 srcpkgs/p11-kit/template | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/srcpkgs/p11-kit/template b/srcpkgs/p11-kit/template
index 28b2f3fc019..67d233aa05e 100644
--- a/srcpkgs/p11-kit/template
+++ b/srcpkgs/p11-kit/template
@@ -1,9 +1,9 @@
 # Template file for 'p11-kit'
 pkgname=p11-kit
 version=0.23.15
-revision=1
+revision=2
 build_style=gnu-configure
-configure_args="--with-module-path=/usr/lib/pkcs11 --without-trust-paths"
+configure_args="--with-module-path=/usr/lib/pkcs11"
 hostmakedepends="automake libtool pkg-config"
 makedepends="libtasn1-devel libffi-devel"
 short_desc="Provides a way to load and enumerate PKCS#11 modules"

Re: [PR PATCH] [Merged]: p11-kit: use system ca certificates as input for trust module

[voidlinux-github]

[-- Attachment #1: Type: text/plain, Size: 502 bytes --]

There's a merged pull request on the void-packages repository

p11-kit: use system ca certificates as input for trust module
https://github.com/void-linux/void-packages/pull/11492
Description: To date p11-kit was built with `--without-trust-paths` which means that p11-kit was not feeded with the systems CAs and presented an empty store when queried.

This broke applications distributed via flatpak, which uses p11-kit to query the hosts available CAs and make them available inside the sandboxes.