Bookworm and Ruby 3.0: Use system root CAs

Link the system certificate directory to the custom OpenSSL certificate
directory. Fixes cert chain errors for HTTP requests sent from Ruby.

Relates https://gitlab.com/gitlab-org/gitlab-build-images/-/issues/132
This commit is contained in:
Clemens Beck 2024-02-12 15:45:13 +01:00
parent 8217b75bbf
commit 16d316f321
No known key found for this signature in database
GPG key ID: 4EC101F2BFCCFEFA

View file

@ -129,6 +129,8 @@ function install_custom_openssl_if_needed() {
make
make install
rm -rf /tmp/openssl-${CUSTOM_OPENSSL_VERSION}
rm -r "${CUSTOM_OPENSSL_DIR}/certs"
ln -sf /etc/ssl/certs "${CUSTOM_OPENSSL_DIR}/certs"
# set CONFIGURE_ARGS for ruby builds
export CONFIGURE_ARGS="${CONFIGURE_ARGS:-} --with-openssl-dir=$CUSTOM_OPENSSL_DIR"
fi