From f595d9bd0c7dd536992e6464e4ef0b4b663b2bf8 Mon Sep 17 00:00:00 2001
From: JuanJo Ciarlante <juanjosec@gmail.com>
Date: Fri, 29 Jan 2021 11:28:10 -0300
Subject: [PATCH] set AWS_CA_BUNDLE to an existing crt file

Fixes #1

Set `AWS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt` by default,
else TLS cert validation fails (at least) when talking to S3.
---
 bitnami/aws-cli/1/debian-10/Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bitnami/aws-cli/1/debian-10/Dockerfile b/bitnami/aws-cli/1/debian-10/Dockerfile
index 7abc65aa1048..b8cdc5894fa0 100644
--- a/bitnami/aws-cli/1/debian-10/Dockerfile
+++ b/bitnami/aws-cli/1/debian-10/Dockerfile
@@ -21,6 +21,8 @@ RUN apt-get update && apt-get upgrade -y && \
     rm -r /var/lib/apt/lists /var/cache/apt/archives
 RUN chmod g+rwX /opt/bitnami
 
+# Fix https://github.com/bitnami/bitnami-docker-aws-cli/issues/1
+ENV AWS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
 ENV BITNAMI_APP_NAME="aws-cli" \
     BITNAMI_IMAGE_VERSION="1.18.222-debian-10-r0" \
     PATH="/opt/bitnami/python/bin:/opt/bitnami/aws-cli/bin:/opt/bitnami/aws-cli/venv/bin:$PATH"