I am in an environment where I need to specify the certificates to use via the SSL_CERT_FILE environment variables, that is working fine with the curl command line tool, and with OpenSSL-based libraries.
When I was trying to use ccache-storage-http-cpp, I noticed that the access to my https server that needed the certificates pointed to SSL_CERT_FILE was not working, and that was a bit surprising for me as curl cli was working fine.
It turns out that in curl, the environment variables are handled at the tool level, not at the library level, see https://github.com/curl/curl/blob/curl-8_21_0/src/tool_operate.c#L2227-L2244 . So for tools that use libcurl to support SSL_CERT_FILE and SSL_CERT_DIR, the tool itself needs to read these env variables, and pass them down to libcurl.
Interestingly, ccache-storage-http-go already supports and out of the box, as in go this env variables are handled at the library level, see https://cs.opensource.google/go/go/+/master:src/crypto/x509/root.go;l=127?q=SSL_CERT_FILE&ss=go%2Fgo .
Would you be interested in a PR that adds support for SSL_CERT_FILE and SSL_CERT_DIR environment variables also in ccache-storage-http-cpp ?
I am in an environment where I need to specify the certificates to use via the
SSL_CERT_FILEenvironment variables, that is working fine with thecurlcommand line tool, and with OpenSSL-based libraries.When I was trying to use
ccache-storage-http-cpp, I noticed that the access to my https server that needed the certificates pointed toSSL_CERT_FILEwas not working, and that was a bit surprising for me ascurlcli was working fine.It turns out that in curl, the environment variables are handled at the tool level, not at the library level, see https://github.com/curl/curl/blob/curl-8_21_0/src/tool_operate.c#L2227-L2244 . So for tools that use
libcurlto supportSSL_CERT_FILEandSSL_CERT_DIR, the tool itself needs to read these env variables, and pass them down to libcurl.Interestingly,
ccache-storage-http-goalready supports and out of the box, as in go this env variables are handled at the library level, see https://cs.opensource.google/go/go/+/master:src/crypto/x509/root.go;l=127?q=SSL_CERT_FILE&ss=go%2Fgo .Would you be interested in a PR that adds support for SSL_CERT_FILE and SSL_CERT_DIR environment variables also in ccache-storage-http-cpp ?