From 2d47f6ff6ea3070f0d128e36f7ada196792a5405 Mon Sep 17 00:00:00 2001 From: Jens Petersen Date: Mon, 11 Aug 2025 18:57:40 +0800 Subject: [PATCH] Inconvenience: update Fedora ca-file In Fedora 43, `/etc/pki/tls/certs/ca-bundle.crt` is being replaced by `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem`. See https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile (sic) --- lib/Network/Http/Inconvenience.hs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Network/Http/Inconvenience.hs b/lib/Network/Http/Inconvenience.hs index 235f290..91680af 100644 --- a/lib/Network/Http/Inconvenience.hs +++ b/lib/Network/Http/Inconvenience.hs @@ -276,7 +276,7 @@ baselineContextSSL = withOpenSSL $ do fedora <- doesDirectoryExist "/etc/pki/tls" if fedora then do - SSL.contextSetCAFile ctx "/etc/pki/tls/certs/ca-bundle.crt" + SSL.contextSetCAFile ctx "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem" else do SSL.contextSetCADirectory ctx "/etc/ssl/certs" SSL.contextSetVerificationMode ctx $ SSL.VerifyPeer True True Nothing