+ca-certs

projects/curl.se/ca-certs/package.yml

@@ -0,0 +1,23 @@
+distributable: ~
+
+versions:
+  # maybe base it off the URL?
+  - 1.0.0
+
+runtime:
+  env:
+    SSL_CERT_FILE: ${{prefix}}/ssl/cert.pem
+
+build:
+  dependencies:
+    linux:
+      curl.se: '*'
+  script: |
+    cd "{{prefix}}"
+    mkdir -p ssl
+    curl -k https://curl.se/ca/cacert-2022-07-19.pem -o ssl/cert.pem
+
+test:
+  dependencies:
+    curl.se: '*'
+  script: curl https://tea.xyz

projects/openssl.org/package.yml

@@ -17,6 +17,10 @@ provides:
   - bin/openssl
   - bin/c_rehash
 
+#BOOTSTRAP
+# dependencies:
+#   curl.se/ca-certs: '*'
+
 build:
   dependencies:
     tea.xyz/gx/cc: c99
@@ -31,12 +35,11 @@ build:
     make --jobs {{ hw.concurrency }}
     make install_sw   # `_sw` avoids installing docs
 
-    #FIXME needs to be a curl.se/ca-certs that gets updates
-    #FIXME on macOS use /etc/ssl/cert.pem (I couldn't make this work)
-    #FIXME or on macOS get certs from the keychain
+    # REMOVE AFTER BOOTSTRAP
     cd "{{prefix}}"
     mkdir -p ssl
     curl -k https://curl.se/ca/cacert-2022-07-19.pem -o ssl/cert.pem
+
   env:
     darwin/aarch64: {ARCH: 'darwin64-arm64-cc'}
     darwin/x86-64:  {ARCH: 'darwin64-x86_64-cc'}