Version in base suite: 2.8.3-2

Base version: ruby-httpclient_2.8.3-2
Target version: ruby-httpclient_2.8.3-3+deb11u1
Base file: /srv/ftp-master.debian.org/ftp/pool/main/r/ruby-httpclient/ruby-httpclient_2.8.3-2.dsc
Target file: /srv/ftp-master.debian.org/policy/pool/main/r/ruby-httpclient/ruby-httpclient_2.8.3-3+deb11u1.dsc

 changelog                                          |    9 +++++
 control                                            |    1 
 patches/0008-Use-system-CA-certificate-store.patch |   33 +++++++++++++++++++++
 patches/series                                     |    1 
 rules                                              |    5 +++
 tests/control                                      |    2 +
 tests/ssl-smoke-test                               |    5 +++
 7 files changed, 56 insertions(+)

diff -Nru ruby-httpclient-2.8.3/debian/changelog ruby-httpclient-2.8.3/debian/changelog
--- ruby-httpclient-2.8.3/debian/changelog	2019-02-20 17:52:56.000000000 +0000
+++ ruby-httpclient-2.8.3/debian/changelog	2021-10-10 12:24:03.000000000 +0000
@@ -1,3 +1,12 @@
+ruby-httpclient (2.8.3-3+deb11u1) bullseye; urgency=medium
+
+  * Add simple autopkgtest to check a basic SSL connection
+  * Add patch to use the system certificate store (Closes: #995448)
+  * debian/rules: remove embedded CA certificate store
+  * Add dependency on ca-certificates
+
+ -- Antonio Terceiro <terceiro@debian.org>  Sun, 10 Oct 2021 09:24:03 -0300
+
 ruby-httpclient (2.8.3-2) unstable; urgency=medium
 
   * Team upload.
diff -Nru ruby-httpclient-2.8.3/debian/control ruby-httpclient-2.8.3/debian/control
--- ruby-httpclient-2.8.3/debian/control	2019-02-20 17:52:56.000000000 +0000
+++ ruby-httpclient-2.8.3/debian/control	2021-10-10 12:24:03.000000000 +0000
@@ -21,6 +21,7 @@
 XB-Ruby-Versions: ${ruby:Versions}
 Depends: ruby | ruby-interpreter,
          ruby-http-cookie (>= 1.0),
+         ca-certificates,
          ${misc:Depends},
          ${shlibs:Depends}
 Description: HTTP client library for ruby
diff -Nru ruby-httpclient-2.8.3/debian/patches/0008-Use-system-CA-certificate-store.patch ruby-httpclient-2.8.3/debian/patches/0008-Use-system-CA-certificate-store.patch
--- ruby-httpclient-2.8.3/debian/patches/0008-Use-system-CA-certificate-store.patch	1970-01-01 00:00:00.000000000 +0000
+++ ruby-httpclient-2.8.3/debian/patches/0008-Use-system-CA-certificate-store.patch	2021-10-10 12:24:03.000000000 +0000
@@ -0,0 +1,33 @@
+From: Antonio Terceiro <terceiro@debian.org>
+Date: Wed, 6 Oct 2021 10:03:32 -0300
+Subject: Use system CA certificate store
+
+---
+ lib/httpclient/ssl_config.rb | 7 +------
+ 1 file changed, 1 insertion(+), 6 deletions(-)
+
+diff --git a/lib/httpclient/ssl_config.rb b/lib/httpclient/ssl_config.rb
+index f6e7ce9..d4e48f2 100644
+--- a/lib/httpclient/ssl_config.rb
++++ b/lib/httpclient/ssl_config.rb
+@@ -249,7 +249,7 @@ class HTTPClient
+     # Loads default trust anchors.
+     # Calling this method resets all existing sessions.
+     def load_trust_ca
+-      load_cacerts(@cert_store)
++      set_default_paths
+       change_notify
+     end
+ 
+@@ -413,11 +413,6 @@ class HTTPClient
+       nil
+     end
+ 
+-    # Use 2048 bit certs trust anchor
+-    def load_cacerts(cert_store)
+-      file = File.join(File.dirname(__FILE__), 'cacert.pem')
+-      add_trust_ca_to_store(cert_store, file)
+-    end
+   end
+ 
+ 
diff -Nru ruby-httpclient-2.8.3/debian/patches/series ruby-httpclient-2.8.3/debian/patches/series
--- ruby-httpclient-2.8.3/debian/patches/series	2019-02-20 17:52:56.000000000 +0000
+++ ruby-httpclient-2.8.3/debian/patches/series	2021-10-10 12:24:03.000000000 +0000
@@ -4,3 +4,4 @@
 0004-Add-upstream-changelog.patch
 0005-tweak-test-dep-change.patch
 disable-test-proxy-ssl.patch
+0008-Use-system-CA-certificate-store.patch
diff -Nru ruby-httpclient-2.8.3/debian/rules ruby-httpclient-2.8.3/debian/rules
--- ruby-httpclient-2.8.3/debian/rules	2019-02-20 17:52:56.000000000 +0000
+++ ruby-httpclient-2.8.3/debian/rules	2021-10-10 12:24:03.000000000 +0000
@@ -6,3 +6,8 @@
 
 %:
 	dh $@ --buildsystem=ruby --with ruby
+
+
+override_dh_auto_install:
+	dh_auto_install
+	rm --verbose $(CURDIR)/debian/ruby-httpclient/usr/lib/ruby/vendor_ruby/httpclient/*.pem
diff -Nru ruby-httpclient-2.8.3/debian/tests/control ruby-httpclient-2.8.3/debian/tests/control
--- ruby-httpclient-2.8.3/debian/tests/control	1970-01-01 00:00:00.000000000 +0000
+++ ruby-httpclient-2.8.3/debian/tests/control	2021-10-10 12:24:03.000000000 +0000
@@ -0,0 +1,2 @@
+Tests: ssl-smoke-test
+Restrictions: needs-internet, allow-stderr
diff -Nru ruby-httpclient-2.8.3/debian/tests/ssl-smoke-test ruby-httpclient-2.8.3/debian/tests/ssl-smoke-test
--- ruby-httpclient-2.8.3/debian/tests/ssl-smoke-test	1970-01-01 00:00:00.000000000 +0000
+++ ruby-httpclient-2.8.3/debian/tests/ssl-smoke-test	2021-10-10 12:24:03.000000000 +0000
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -exu
+
+httpclient get https://bugs.debian.org/