From cd3c3482e8b4b4cfca1b2ef2c974bc97b5f56052 Mon Sep 17 00:00:00 2001
From: Nicolas CARPi <nico-git@deltablot.email>
Date: Sun, 14 Jan 2024 23:48:06 +0100
Subject: [PATCH] Fix `/etc/ssl/cert.pem` not in `open_basedir`

---
 CHANGELOG.md        | 1 +
 src/init/prepare.sh | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 10e2d38..2c962eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 # 5.0.0
 
 * Change the default value of ``PHP_MAX_MEMORY`` from 256M (256 Mb) to 2G (2 Gb).
+* Fix `/etc/ssl/cert.pem` not in `open_basedir`
 
 # 4.7.0
 
diff --git a/src/init/prepare.sh b/src/init/prepare.sh
index 284036e..52279ca 100755
--- a/src/init/prepare.sh
+++ b/src/init/prepare.sh
@@ -291,7 +291,8 @@ phpConf() {
     sed -i -e "s/%PHP_MAX_EXECUTION_TIME%/${php_max_execution_time}/" $f
 
     # production open_basedir conf value
-    open_basedir="/.dockerenv:/elabftw/:/tmp/:/usr/bin/unzip"
+    # /etc/ssl/cert.pem is for openssl and timestamp related functions
+    open_basedir="/.dockerenv:/elabftw/:/tmp/:/usr/bin/unzip:/etc/ssl/cert.pem"
     # DEV MODE
     if ($dev_mode); then
         # we don't want to use opcache as we want our changes to be immediately visible