From 38e7132dcfd37799a1392eb1a6fcdaa2c16bdfef Mon Sep 17 00:00:00 2001 From: Maxim Cournoyer Date: Mon, 10 Feb 2025 21:54:34 +0900 Subject: gnu: gnutls: Use p11-kit to provide the default certificates. This makes it so that GnuTLS always knows to locate the nss-certs without users having to do anything. This default behavior can be modified by users via the p11-kit configuration mechanism, which can be be done per-user. * gnu/packages/patches/gnutls-skip-trust-store-test.patch: Delete file. * gnu/local.mk (dist_patch_DATA): De-register it. * gnu/packages/tls.scm (gnutls) [source]: Remove 'gnutls-skip-trust-store-test.patch' patch. [#:configure-flags]: Delete "--with-default-trust-store-dir=/etc/ssl/certs". Add "--with-default-trust-store-pkcs11=pkcs11:". Update comment. Fixes: Fixes: Change-Id: Ie45bfe8c2884c1ab277b0fba6135a5af3a9b6a3d --- gnu/local.mk | 1 - 1 file changed, 1 deletion(-) (limited to 'gnu/local.mk') diff --git a/gnu/local.mk b/gnu/local.mk index 1b4d3ac37b6..f3c01e0e9c5 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1518,7 +1518,6 @@ dist_patch_DATA = \ %D%/packages/patches/gnumach-version.patch \ %D%/packages/patches/gnupg-default-pinentry.patch \ %D%/packages/patches/gnupg-1-build-with-gcc10.patch \ - %D%/packages/patches/gnutls-skip-trust-store-test.patch \ %D%/packages/patches/gnutls-no-which.patch \ %D%/packages/patches/gobject-introspection-absolute-shlib-path.patch \ %D%/packages/patches/gobject-introspection-absolute-shlib-path-1.72.patch \ -- cgit v1.3