zimbatm 9a579e429c php.buildComposerProject2: use cacert for vendored composer/ca-bundle ...

Many PHP applications vendor composer/ca-bundle. It uses
SSL_CERT_FILE, SSL_CERT_DIR, openssl.cafile and well-known system
paths first. If none of them is usable (for example a container
without /etc/ssl, or a sandbox without cacert), it uses its vendored
res/cacert.pem. That copy does not get cacert updates.

Replace every vendored copy with a symlink to the cacert bundle in the
install hook. This also covers composer, so remove its own symlink.

Ref: #576541

Assisted-by: Claude Code (claude-opus-5)

2026-10-20 21:20:38 +00:00

..

builders

php.buildComposerProject2: use cacert for vendored composer/ca-bundle

2026-10-20 21:20:38 +00:00

pkgs

…

build-pecl.nix

…