Dynamically use getlocalbase(3)

Author: michael-o

.cargo/config.toml

@@ -0,0 +1,3 @@
+[target.freebsd]
+rustflags = ["-lutil"]
+

Cargo.toml

@@ -14,3 +14,7 @@ edition = '2021'
 # This was arbitrarily chosen on 2025-01-23 as "pretty old" as previously
 # key didn't exist in `Cargo.toml` prior to that.
 rust-version = '1.60.0'
+
+[target.'cfg(target_os = "freebsd")'.dependencies]
+libc = "0.2.177"
+

src/lib.rs

@@ -53,17 +53,28 @@ pub fn candidate_cert_dirs() -> impl Iterator<Item = &'static Path> {
     .map(Path::new)
     .filter(|p| p.exists())
 }
+
 #[cfg(target_os = "freebsd")]
 pub fn candidate_cert_dirs() -> impl Iterator<Item = &'static Path> {
+    extern "C" {
+        fn getlocalbase() -> *const libc::c_char;
+    }
+    // see manpage of getlocalbase(3): https://man.freebsd.org/cgi/man.cgi?query=getlocalbase&sektion=3
+    let localbase = unsafe {
+        let ptr = getlocalbase();
+        let c_str = std::ffi::CStr::from_ptr(ptr);
+        c_str.to_str().unwrap()
+    };
+
     // see manpage of certctl(8): https://man.freebsd.org/cgi/man.cgi?query=certctl&sektion=8
     // see security/openssl* ports
     [
-        "/etc/ssl",
-        "/usr/local/etc/ssl",
-        "/usr/local/openssl",
+        "/etc/ssl".to_string(),
+        format!("{}/etc/ssl", localbase),
+        format!("{}/openssl", localbase),
     ]
-    .iter()
-    .map(Path::new)
+    .into_iter()
+    .map(|s| Path::new(Box::leak(Box::new(s))))
     .filter(|p| p.exists())
 }