From e1ff6899f637ff0b4808994d66e982a885bcd150 Mon Sep 17 00:00:00 2001
From: Timo Wilken
Date: Fri, 28 Apr 2023 21:30:35 +0200
Subject: Use proper SSL cert path

This avoids relying on nss-certs being installed system-wide.
---
 tw/services/media.scm | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

(limited to 'tw/services/media.scm')

diff --git a/tw/services/media.scm b/tw/services/media.scm
index 9755af9d..ec4d0afc 100644
--- a/tw/services/media.scm
+++ b/tw/services/media.scm
@@ -1,5 +1,6 @@
 (define-module (tw services media)
   #:use-module (gnu)
+  #:use-module (gnu packages certs)
   #:use-module (gnu packages video)
   #:use-module (gnu services)
   #:use-module (gnu services configuration)
@@ -46,8 +47,7 @@ run the download script.  By default, picks a random time between 04:00 and
             #$(program-file
                "yt-dlp-command"
                #~(begin
-                   (setenv "SSL_CERT_DIR" "/etc/ssl/certs")
-                   (setenv "SSL_CERT_FILE" "/etc/ssl/certs/ca-certificates.crt")
+                   (setenv "SSL_CERT_DIR" #$(file-append nss-certs "/etc/ssl/certs"))
                    (chdir #$(yt-dlp-configuration-media-directory config))
                    ;; Auto-update if we're using yt-dlp from the media directory.
                    #$@(if yt-dlp-package '()
@@ -80,8 +80,7 @@ run the download script.  By default, picks a random time between 01:00 and
           #$(program-file
              "get-iplayer-command"
              #~(begin
-                 (setenv "SSL_CERT_DIR" "/etc/ssl/certs")
-                 (setenv "SSL_CERT_FILE" "/etc/ssl/certs/ca-certificates.crt")
+                 (setenv "SSL_CERT_DIR" #$(file-append nss-certs "/etc/ssl/certs"))
                  (execl #$(file-append (get-iplayer-configuration-get-iplayer config)
                                        "/bin/get_iplayer")
                         "get_iplayer" "--pvr" "--profile-dir"
-- 
cgit v1.2.3