From 359b5957472bf4e87d5f03f26f50c8a14516e6ff Mon Sep 17 00:00:00 2001
From: Don Armstrong <don@donarmstrong.com>
Date: Fri, 7 Aug 2015 11:55:39 -0700
Subject: [PATCH] add workaround for lynx to use ca-debian/ca-certificates.crt

---
 scripts/service | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/scripts/service b/scripts/service
index 364a0ed..77165f8 100755
--- a/scripts/service
+++ b/scripts/service
@@ -904,9 +904,12 @@ END
 sub sendlynxdocraw {
     my ($relpath,$description) = @_;
     $doc='';
-    open(L,"lynx -nolist -dump $gCGIDomain/\Q$relpath\E 2>&1 |") || die "fork for lynx: $!";
+    # work around DSA cert setup
+    $ENV{SSL_CERT_FILE}='/etc/ssl/ca-debian/ca-certificates.crt';
+    open(L,"lynx -nolist -dump https://$gCGIDomain/\Q$relpath\E 2>&1 |") || die "fork for lynx: $!";
     while(<L>) { $doc.=$_; }
     $!=0; close(L);
+    delete $ENV{SSL_CERT_FILE};
     if ($? == 255 && $doc =~ m/^\n*lynx: Can\'t access start file/) {
         print {$transcript} "Information ($description) is not available -\n".
 	     "perhaps the $gBug does not exist or is not on the WWW yet.\n";
-- 
2.39.2