]> git.ipfire.org Git - thirdparty/httpx.git/commitdiff
Explain SSL_CERT_DIR specific format (#1470)
authorQuentin Pradet <quentin.pradet@gmail.com>
Wed, 17 Feb 2021 10:11:08 +0000 (14:11 +0400)
committerGitHub <noreply@github.com>
Wed, 17 Feb 2021 10:11:08 +0000 (10:11 +0000)
It's easy to believe that any .pem files there will get picked up automatically, but that's not the case.

docs/environment_variables.md

index 1cc5ff3437aed35e0a72469bced6787c93707a1f..d9cc89a58fffef75f0314d8cd3889c4a6a5b45e6 100644 (file)
@@ -122,11 +122,9 @@ SSL_CERT_FILE=/path/to/ca-certs/ca-bundle.crt python -c "import httpx; httpx.get
 
 ## `SSL_CERT_DIR`
 
-Valid values: a directory
+Valid values: a directory following an [OpenSSL specific layout](https://www.openssl.org/docs/manmaster/man3/SSL_CTX_load_verify_locations.html).
 
-If this environment variable is set then HTTPX will load
-CA certificates from the specified location instead of the default
-location.
+If this environment variable is set and the directory follows an [OpenSSL specific layout](https://www.openssl.org/docs/manmaster/man3/SSL_CTX_load_verify_locations.html) (ie. you ran `c_rehash`) then HTTPX will load CA certificates from this directory instead of the default location.
 
 Example: