crypton-x509-system-1.6.8: System/X509/Common.hs

module System.X509.Common (
    maybeSSLCertEnvOr,
)
where

import Data.Foldable (asum)
import Data.Maybe (catMaybes, fromMaybe)
import Data.Monoid (mconcat)
import Data.X509.CertificateStore
import System.Environment (lookupEnv)

getOpenSslEnvs :: IO (Maybe String)
getOpenSslEnvs =
    asum
        <$> traverse
            lookupEnv
            [ "SSL_CERT_FILE"
            , "SSL_CERT_DIR"
            ]

maybeSSLCertEnvOr :: IO CertificateStore -> IO CertificateStore
maybeSSLCertEnvOr defaultStore = do
    overrideCertPaths <- getOpenSslEnvs
    case overrideCertPaths of
        Nothing -> defaultStore
        Just certPath -> fromMaybe mempty <$> (readCertificateStore certPath)