From ae3650587394f0fb6d3c129ae00a7f5d0b079dc7 Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Tue, 18 Aug 2020 20:27:22 +0200 Subject: [PATCH] python/env make sure requests library uses system certificate store when being called from cron or configd (set REQUESTS_CA_BUNDLE) --- src/etc/inc/system.inc | 1 + src/opnsense/service/conf/configd.conf | 1 + 2 files changed, 2 insertions(+) diff --git a/src/etc/inc/system.inc b/src/etc/inc/system.inc index b10936279..d4ebf5d41 100644 --- a/src/etc/inc/system.inc +++ b/src/etc/inc/system.inc @@ -996,6 +996,7 @@ function system_cron_configure($verbose = false, $defer = false) $crontab_contents .= "# /etc/crontab, see the crontab(5) manual page.\n"; $crontab_contents .= "SHELL=/bin/sh\n"; $crontab_contents .= "PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin\n"; + $crontab_contents .= "REQUESTS_CA_BUNDLE=/usr/local/etc/ssl/cert.pem\n"; $crontab_contents .= "#minute\thour\tmday\tmonth\twday\tcommand\n"; foreach ($autocron as $item) { diff --git a/src/opnsense/service/conf/configd.conf b/src/opnsense/service/conf/configd.conf index 93c1718f7..fe8bc8c9a 100644 --- a/src/opnsense/service/conf/configd.conf +++ b/src/opnsense/service/conf/configd.conf @@ -5,3 +5,4 @@ pid_filename:/var/run/configd.pid [environment] PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin HOME=/ +REQUESTS_CA_BUNDLE=/usr/local/etc/ssl/cert.pem