From fbc903e920f0c4ce384ed333f1d3035e44957e8f Mon Sep 17 00:00:00 2001
From: Joe Groocock <me@frebib.net>
Date: Tue, 12 May 2020 09:49:18 +0100
Subject: [PATCH] Fix missing curl/libssl ca-certificates

Before:
    root@b054d9b406bf /u/l/plexmediaserver> curl https://spritsail.io -I
    curl: (77) error setting certificate verify locations:
      CAfile: /etc/ssl/certs/ca-certificates.crt
      CApath: none

After:
    root@7571fd092ba1 /u/l/plexmediaserver> curl https://spritsail.io -I
    HTTP/1.1 200 OK
    Server: nginx/1.17.10
    Date: Tue, 12 May 2020 09:38:09 GMT
    Content-Type: text/html
    Content-Length: 8158
    Last-Modified: Fri, 01 Feb 2019 20:18:29 GMT
    Connection: keep-alive
    ETag: 5c54a995-1fde
    Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
    X-Content-Type-Options: nosniff
    X-Frame-Options: DENY
    Accept-Ranges: bytes

Signed-off-by: Joe Groocock <me@frebib.net>
---
 Dockerfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 47ec312..a1cc404 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -152,7 +152,9 @@ RUN git clone https://github.com/curl/curl.git --branch $CURL_VER --depth 1 . \
 
 WORKDIR $PREFIX
 
-RUN mkdir -p /output/usr/lib /output/usr/bin \
+RUN mkdir -p /output/usr/lib /output/usr/bin /output/etc/ssl/certs \
+    # Link Plex ca-certificates as system store so curl and others can use them too
+ && ln -sv /usr/lib/plexmediaserver/Resources/cacert.pem /output/etc/ssl/certs/ca-certificates.crt \
  && mv usr/lib/*.so* \
        /plex/usr/lib/* \
        /output/usr/lib \