From ca44a236a05163fb1222794c9455a84d98921de8 Mon Sep 17 00:00:00 2001
From: "Azamat H. Hackimov" <azamat.hackimov@gmail.com>
Date: Wed, 12 Jan 2022 04:26:39 +0300
Subject: [PATCH] .gitlab-ci.yml: Add steps to `before_script` to ensure recent
 CA.

Fetch current list of valid CAs from Windows Update and manually import them
to trusted datastore.  This action is required to make downloads work from
sites that need recent Let's Encrypt ISRG Root X1 certificate.
---
 .gitlab-ci.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 4bb58db4a..ac925c3a5 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -40,6 +40,9 @@ variables:
     #   -Dfoo=enabled
     #   -Dbar=disabled
   before_script:
+    # Update RootCAs in order to access to some sites.
+    - certutil -generateSSTFromWU "C:\roots.sst"
+    - Import-Certificate -CertStoreLocation "Cert:\LocalMachine\Root" "C:\roots.sst"
     # Make sure meson is up to date, so we don't need to rebuild the image
     # with each release.
     - pip3 install meson==0.59.1