libressl: skip updating cert if not root

diff --git a/core/libressl/checksums b/core/libressl/checksums
index a523f3a9c5ff118a4c1f743b100e43bef95d1311..0930208479089535b465f7babffa142622b5634f 100644 (file)
--- a/core/libressl/checksums
+++ b/core/libressl/checksums
@@ -1,2 +1,2 @@
 a471565b36ccd1a70d0bd7d37c6e95c43a26a62829b487d9d2cdebfe58be3066
-a75b76146a4ec6be2cb72f4334f29459cb0769659223179be1eb96851d0a7afc
+001c4fa873c59ab0ad5d02ed2dc633c92f386158d76c97f413f0782760021b26

diff --git a/core/libressl/files/update-certdata.sh b/core/libressl/files/update-certdata.sh
index 6db69c7eacd4995c95c85a39bd9ac61b6fbc1572..2901c7b41ff3a3ded41402e3bb5cbbec1906b562 100755 (executable)
--- a/core/libressl/files/update-certdata.sh
+++ b/core/libressl/files/update-certdata.sh
@@ -1,7 +1,11 @@
 #!/bin/sh -e
 
-cd /etc/ssl && {
-    curl -LO https://curl.haxx.se/ca/cacert.pem
-    mv -f cacert.pem cert.pem
-    printf '%s\n' "${0##*/}: updated cert.pem"
-}
+if [ -w /etc/ssl/cacert.pem ]; then
+    cd /etc/ssl && {
+        curl -LO https://curl.haxx.se/ca/cacert.pem
+        mv -f cacert.pem cert.pem
+        printf '%s\n' "${0##*/}: updated cert.pem"
+    }
+else
+    printf "Skipping updating certdata as /etc/ssl/cacert.pem is not writable\n"
+fi

diff --git a/core/libressl/version b/core/libressl/version
index e82f87fb51b33c5acd748cc15fd80c04fcbfaed3..75f3a39f3d880768f87b375c8ea966b3e5e115a1 100644 (file)
--- a/core/libressl/version
+++ b/core/libressl/version
@@ -1 +1 @@
-3.3.3 1
+3.3.3 2