| /* Distributed under the OSI-approved BSD 3-Clause License. See accompanying |
| file Copyright.txt or https://cmake.org/licensing for details. */ |
| #include "cmCurl.h" |
| |
| #include "cmThirdParty.h" |
| |
| #if !defined(CMAKE_USE_SYSTEM_CURL) && !defined(_WIN32) && \ |
| !defined(__APPLE__) && !defined(CURL_CA_BUNDLE) && !defined(CURL_CA_PATH) |
| #define CMAKE_FIND_CAFILE |
| #include "cmSystemTools.h" |
| #endif |
| |
| // curl versions before 7.21.5 did not provide this error code |
| #if defined(LIBCURL_VERSION_NUM) && LIBCURL_VERSION_NUM < 0x071505 |
| #define CURLE_NOT_BUILT_IN 4 |
| #endif |
| |
| #define check_curl_result(result, errstr) \ |
| if ((result) != CURLE_OK && (result) != CURLE_NOT_BUILT_IN) { \ |
| e += e.empty() ? "" : "\n"; \ |
| e += (errstr); \ |
| e += ::curl_easy_strerror(result); \ |
| } |
| |
| std::string cmCurlSetCAInfo(::CURL* curl, const char* cafile) |
| { |
| std::string e; |
| if (cafile && *cafile) { |
| ::CURLcode res = ::curl_easy_setopt(curl, CURLOPT_CAINFO, cafile); |
| check_curl_result(res, "Unable to set TLS/SSL Verify CAINFO: "); |
| } |
| #ifdef CMAKE_FIND_CAFILE |
| #define CMAKE_CAFILE_FEDORA "/etc/pki/tls/certs/ca-bundle.crt" |
| else if (cmSystemTools::FileExists(CMAKE_CAFILE_FEDORA, true)) { |
| ::CURLcode res = |
| ::curl_easy_setopt(curl, CURLOPT_CAINFO, CMAKE_CAFILE_FEDORA); |
| check_curl_result(res, "Unable to set TLS/SSL Verify CAINFO: "); |
| } |
| #undef CMAKE_CAFILE_FEDORA |
| else { |
| #define CMAKE_CAFILE_COMMON "/etc/ssl/certs/ca-certificates.crt" |
| if (cmSystemTools::FileExists(CMAKE_CAFILE_COMMON, true)) { |
| ::CURLcode res = |
| ::curl_easy_setopt(curl, CURLOPT_CAINFO, CMAKE_CAFILE_COMMON); |
| check_curl_result(res, "Unable to set TLS/SSL Verify CAINFO: "); |
| } |
| #undef CMAKE_CAFILE_COMMON |
| #define CMAKE_CAPATH_COMMON "/etc/ssl/certs" |
| if (cmSystemTools::FileIsDirectory(CMAKE_CAPATH_COMMON)) { |
| ::CURLcode res = |
| ::curl_easy_setopt(curl, CURLOPT_CAPATH, CMAKE_CAPATH_COMMON); |
| check_curl_result(res, "Unable to set TLS/SSL Verify CAPATH: "); |
| } |
| #undef CMAKE_CAPATH_COMMON |
| } |
| #endif |
| return e; |
| } |