Date: Tue, 26 Nov 2013 13:13:31 +0100
From: Natanael Copa <ncopa@alpinelinux.org>
To: Eivind Uggedal <eivind@uggedal.com>
Cc: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] [PATCH] main/curl: add ca-certificates as dep
Message-ID: <20131126131331.1b6cf200@ncopa-desktop.alpinelinux.org>
In-Reply-To: <1385465997-16888-1-git-send-email-eivind@uggedal.com>
References: <1385465997-16888-1-git-send-email-eivind@uggedal.com>
Precedence: list
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Tue, 26 Nov 2013 11:39:57 +0000
Eivind Uggedal <eivind@uggedal.com> wrote:

> git is for instance not usable against https repos without valid
> root certs to check against.

Yeah, its needed for https, but curl can work just fine with http/ftp
withotu ca-certificates, which is why I let the ca-certificates be
'optional'.

It is a question of how much bloat (eg have ca-certificates installed
but unused when you only need non-https) you want to pay for the 'just
works' factor.

On the other hand, if ca-certificates is missing, people might use
--insecure to disable certificate checks with https and I don't think
we want encourage that.

Applied. Thanks!

-nc


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---