Add rd.noverifyssl argument (#852229)

This adds --insecure to the curl args so that self-signed certificates
will be accepted.

diff --git a/dracut.cmdline.7.asc b/dracut.cmdline.7.asc
index 350aecf6a625581cf4af8159c4081fc9a5359248..27d3a55131124cfbf806b4b43c8e18a1314260ee 100644 (file)
--- a/dracut.cmdline.7.asc
+++ b/dracut.cmdline.7.asc
@@ -114,6 +114,9 @@ Misc
     started. If you have hardware, which takes a very long time to announce its
     drives, you might want to extend this value.
 
+**rd.noverifyssl**::
+    accept self-signed certificates for ssl downloads.
+
 [[dracutkerneldebug]]
 Debug
 ~~~~~

diff --git a/modules.d/45url-lib/url-lib.sh b/modules.d/45url-lib/url-lib.sh
index a8069efad213b64d9feb1de64bb568a93821337d..034a7cd129c6a7f98d27f2d614d9793201803fb7 100755 (executable)
--- a/modules.d/45url-lib/url-lib.sh
+++ b/modules.d/45url-lib/url-lib.sh
@@ -54,7 +54,8 @@ add_url_handler() {
 
 export CURL_HOME="/run/initramfs/url-lib"
 mkdir -p $CURL_HOME
-curl_args="--location --retry 3 --fail --show-error --insecure"
+curl_args="--location --retry 3 --fail --show-error"
+getargbool 0 rd.noverifyssl && curl_args+=" --insecure"
 
 curl_fetch_url() {
     local url="$1" outloc="$2"