Bug 874023

Summary: [PATCH] (lib)curl ignores OPENSSL_CONF environment variable
Product: [Fedora] Fedora Reporter: Artem S. Tashkinov <aros>
Component: curlAssignee: Kamil Dudka <kdudka>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: rawhideCC: kdudka, paul
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-11-07 21:02:55 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
A patch for ssluse.c to make use of OPENSSL_CONF environment variable none

Description Artem S. Tashkinov 2012-11-07 10:19:52 UTC
Created attachment 639924 [details]
A patch for ssluse.c to make use of OPENSSL_CONF environment variable

OpenSSL documentation says that you can use  OPENSSL_CONF environment variable to redefine openssl configuration file.

CURL by default ignores this variable.

This patch fixes this problem:

Comment 1 Kamil Dudka 2012-11-07 21:02:55 UTC
Thank you for contributing the patch, however we do not build libcurl against OpenSSL in Fedora packages, so your patch is not applicable.  Please have a look at NSS environment variables:

https://developer.mozilla.org/en-US/docs/NSS_reference/NSS_environment_variables

Comment 2 Artem S. Tashkinov 2012-11-07 21:20:02 UTC
NSS doesn't support GOST encryption standards and other openssl features but, I guess, fedora and redhat people know what's better for me.

In the meanwhile I will compile curl with openssl on my system.

Comment 3 Kamil Dudka 2012-11-07 21:41:14 UTC
You can consider submitting your patch upstream.  It will not affect libcurl packages on Fedora, but you can get some feedback from users of OpenSSL-powered libcurl:

http://curl.haxx.se/docs/faq.html#How_do_I_submit_my_patch

... and chances are the patch will be accepted there.

Comment 4 Artem S. Tashkinov 2012-11-07 21:54:31 UTC
You're quite right, this patch should be merged upstream.