OpenSSL's module builds with --openssldir=/app/ssl, but nothing populates /app/ssl/certs, so SSL_CTX_set_default_verify_paths() always fails to find any CA. Point SSL_CERT_FILE at the runtime's real bundle (/etc/ssl/cert.pem) via finish-args instead. Verified with --headless=text against example.com, news.ycombinator.com, and google.com. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| flatpak-ssl-cert-path.patch | ||
| sandbox-fixes.patch | ||