diff options
author | Matthias Andree <matthias.andree@gmx.de> | 2021-11-20 19:23:57 +0100 |
---|---|---|
committer | Matthias Andree <matthias.andree@gmx.de> | 2021-11-21 00:37:08 +0100 |
commit | 12e9056cc0db29fdc1cfd79c6e08bc53ab4ab0af (patch) | |
tree | 895954e1a4208fb8aab6c18db4d89def239aa386 /INSTALL | |
parent | f3d5722682201383f6c3d23dd9c8b51a47f90b01 (diff) | |
download | fetchmail-12e9056cc0db29fdc1cfd79c6e08bc53ab4ab0af.tar.gz fetchmail-12e9056cc0db29fdc1cfd79c6e08bc53ab4ab0af.tar.bz2 fetchmail-12e9056cc0db29fdc1cfd79c6e08bc53ab4ab0af.zip |
wolfSSL: support WOLFSSL_TRUST_FILE as default trust store
...because wolfSSL 5.0.0 does not support a default trust store, unlike
OpenSSL.
Diffstat (limited to 'INSTALL')
-rw-r--r-- | INSTALL | 18 |
1 files changed, 17 insertions, 1 deletions
@@ -51,6 +51,8 @@ with all OpenSSL APIs (as of 5.0.0): ./configure --enable-opensslall --enable-harden make && make test && make install +fetchmail's configure option --with-wolfssl takes precedence over --with-ssl. + 1.2 gettext (internationalization) Internationalization of fetchmail requires GNU gettext (libintl and @@ -89,7 +91,21 @@ configure option '--with-included-gettext'. Installing fetchmail is easy. From within this directory, type: - ./configure +When using OpenSSL: + + ./configure + +When using wolfSSL (adjust the location, see below): + + ./configure --with-wolfssl \ + WOLFSSL_TRUST_FILE=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem + +Here, you need to adjust the file path according to where your ca_cert_nss or +ca-certificates package installs the default trust bundle in PEM format with +BEGIN CERTIFICATE lines. Some typical locations as of 2021 are: +on Fedora Linux: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem +on Debian/Ubuntu: /etc/ssl/certs/ca-certificates.crt +on FreeBSD: /usr/local/share/certs/ca-root-nss.crt The autoconfiguration script will spend a bit of time figuring out the specifics of your system. If you want to specify a particular compiler |