From 45f856554bf70317907c128e87ec6475e784c8a6 Mon Sep 17 00:00:00 2001
From: Jacob Heider <jacob@tea.xyz>
Date: Thu, 19 Jan 2023 03:34:57 -0500
Subject: [PATCH] +ca-certs

---
 projects/curl.se/ca-certs/package.yml | 23 +++++++++++++++++++++++
 projects/openssl.org/package.yml      |  9 ++++++---
 2 files changed, 29 insertions(+), 3 deletions(-)
 create mode 100644 projects/curl.se/ca-certs/package.yml

diff --git a/projects/curl.se/ca-certs/package.yml b/projects/curl.se/ca-certs/package.yml
new file mode 100644
index 00000000..c3953aef
--- /dev/null
+++ b/projects/curl.se/ca-certs/package.yml
@@ -0,0 +1,23 @@
+distributable: ~
+
+versions:
+  # maybe base it off the URL?
+  - 1.0.0
+
+runtime:
+  env:
+    SSL_CERT_FILE: ${{prefix}}/ssl/cert.pem
+
+build:
+  dependencies:
+    linux:
+      curl.se: '*'
+  script: |
+    cd "{{prefix}}"
+    mkdir -p ssl
+    curl -k https://curl.se/ca/cacert-2022-07-19.pem -o ssl/cert.pem
+
+test:
+  dependencies:
+    curl.se: '*'
+  script: curl https://tea.xyz
diff --git a/projects/openssl.org/package.yml b/projects/openssl.org/package.yml
index 06fb91ff..773619dc 100644
--- a/projects/openssl.org/package.yml
+++ b/projects/openssl.org/package.yml
@@ -17,6 +17,10 @@ provides:
   - bin/openssl
   - bin/c_rehash
 
+#BOOTSTRAP
+# dependencies:
+#   curl.se/ca-certs: '*'
+
 build:
   dependencies:
     tea.xyz/gx/cc: c99
@@ -31,12 +35,11 @@ build:
     make --jobs {{ hw.concurrency }}
     make install_sw   # `_sw` avoids installing docs
 
-    #FIXME needs to be a curl.se/ca-certs that gets updates
-    #FIXME on macOS use /etc/ssl/cert.pem (I couldn't make this work)
-    #FIXME or on macOS get certs from the keychain
+    # REMOVE AFTER BOOTSTRAP
     cd "{{prefix}}"
     mkdir -p ssl
     curl -k https://curl.se/ca/cacert-2022-07-19.pem -o ssl/cert.pem
+
   env:
     darwin/aarch64: {ARCH: 'darwin64-arm64-cc'}
     darwin/x86-64:  {ARCH: 'darwin64-x86_64-cc'}