Unconditional use of curl option --capath is wrong in case server provides a non-IGTF certificate

[ahaupt]

Hi Onno,

prometheus.desy.de uses a standard DFN host certificate which curl can verify without setting --capath. So using this option unconditionally is counterproductive in this case.

Haven't found a nice way to fix this, yet - that's why I just open this bug ;-)

Cheers,
Andreas

[onnozweers]

How about we create a parameter igtf which is false by default, but which you can set to true by specifying --igtf or with an environment var like export ada_igtf=true? Of course the option could be set in /etc/ada.conf or ~/.ada/ada.conf as well. So, for us, we would set igtf=true in our /etc/ada.conf file.

Then, when igtf=true, the curl --capath will be set. When igtf=false, the --capath will not be used.