From 16d316f321e255a70addacf3b842f3d596f1b44b Mon Sep 17 00:00:00 2001
From: Clemens Beck <cbeck@gitlab.com>
Date: Mon, 12 Feb 2024 15:45:13 +0100
Subject: [PATCH] Bookworm and Ruby 3.0: Use system root CAs

Link the system certificate directory to the custom OpenSSL certificate
directory. Fixes cert chain errors for HTTP requests sent from Ruby.

Relates https://gitlab.com/gitlab-org/gitlab-build-images/-/issues/132
---
 scripts/install-ruby | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/scripts/install-ruby b/scripts/install-ruby
index 026548f..600cbed 100755
--- a/scripts/install-ruby
+++ b/scripts/install-ruby
@@ -129,6 +129,8 @@ function install_custom_openssl_if_needed() {
       make
       make install
       rm -rf /tmp/openssl-${CUSTOM_OPENSSL_VERSION}
+      rm -r "${CUSTOM_OPENSSL_DIR}/certs"
+      ln -sf /etc/ssl/certs "${CUSTOM_OPENSSL_DIR}/certs"
       # set CONFIGURE_ARGS for ruby builds
       export CONFIGURE_ARGS="${CONFIGURE_ARGS:-} --with-openssl-dir=$CUSTOM_OPENSSL_DIR"
     fi