From f4da13d51945da563593dee0a49298181d9f1f8d Mon Sep 17 00:00:00 2001
From: Brent Cook <bcook@openbsd.org>
Date: Thu, 12 Mar 2015 11:26:55 -0500
Subject: [PATCH] allow configuring the CA cert path

this is only necessary if constraints are enabled
---
 configure.ac | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/configure.ac b/configure.ac
index 338626b..378762f 100644
--- a/configure.ac
+++ b/configure.ac
@@ -221,6 +221,15 @@ AC_ARG_WITH(privsep-user,
 )
 AC_SUBST(PRIVSEP_USER)
 
+AC_ARG_WITH(cacert,
+	[  --with-cacert=path       CA certificate location for HTTPS constraint validation],
+	[ AC_DEFINE_UNQUOTED(NTPD_USER, "$withval",
+	    [CA certificate path])
+	  CONSTRAINT_CA=$withval ],
+	[ CONSTRAINT_CA=/etc/ssl/certs/ca-certificates.crt ]
+)
+AC_SUBST(CONSTRAINT_CA)
+
 PRIVSEP_PATH=/var/empty
 AC_SUBST(PRIVSEP_PATH)