Allow overriding TLS_DEFAULT_CA_FILE in CMake builds

The CMake build unconditionally defined `TLS_DEFAULT_CA_FILE` as
`${OPENSSLDIR}/cert.pem`, so a value supplied with
`-DTLS_DEFAULT_CA_FILE` was ignored.

Add `TLS_DEFAULT_CA_FILE` as a cache variable and use it for the libtls
definition, falling back to `${OPENSSLDIR}/cert.pem` when unset.

2 files changed, 6 insertions, 1 deletions

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 7ab04ab..d3424c7 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -55,6 +55,7 @@ option(ENABLE_ASM "Enable assembly" ON)
 option(ENABLE_EXTRATESTS "Enable extra tests that may be unreliable on some platforms" OFF)
 option(ENABLE_NC "Enable installing TLS-enabled nc(1)" OFF)
 set(OPENSSLDIR ${OPENSSLDIR} CACHE PATH "Set the default openssl directory" FORCE)
+set(TLS_DEFAULT_CA_FILE ${TLS_DEFAULT_CA_FILE} CACHE PATH "Set the default CA file" FORCE)
 set(LIBRESSL_INSTALL_CMAKEDIR "${CMAKE_INSTALL_LIBDIR}/cmake/LibreSSL" CACHE STRING "Installation directory for the CMake targets")
 
 option(USE_STATIC_MSVC_RUNTIMES "Use /MT instead of /MD in MSVC" OFF)
@@ -506,6 +507,10 @@ else()
         set(CONF_DIR "${OPENSSLDIR}")
 endif()
 
+if(TLS_DEFAULT_CA_FILE STREQUAL "")
+        set(TLS_DEFAULT_CA_FILE "${OPENSSLDIR}/cert.pem")
+endif()
+
 add_subdirectory(include)
 add_subdirectory(crypto)
 add_subdirectory(ssl)
diff --git a/tls/CMakeLists.txt b/tls/CMakeLists.txt
index a1b244a..258cd95 100644
--- a/tls/CMakeLists.txt
+++ b/tls/CMakeLists.txt
@@ -41,7 +41,7 @@ if(WIN32)
         set(TLS_COMPAT_SRC ${TLS_COMPAT_SRC} compat/pwrite.c)
 endif()
 
-add_definitions(-DTLS_DEFAULT_CA_FILE=\"${OPENSSLDIR}/cert.pem\")
+add_definitions(-DTLS_DEFAULT_CA_FILE=\"${TLS_DEFAULT_CA_FILE}\")
 
 file(COPY ${CMAKE_CURRENT_SOURCE_DIR}/tls.sym DESTINATION
         ${CMAKE_CURRENT_BINARY_DIR})