Freebsd certs not found

Open
#20 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

  • #39 by @michael-o — closed without merging
  • #43 by @michael-o — closed without merging

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
30/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
rust
Domain
security

Research direction

The issue asks that openssl-probe also look in /usr/local/share/certs/ca-root-nss.crt on FreeBSD, which it currently skips; SSL_CERT_FILE pointing there is the working workaround. Read the two closed, unmerged pull requests (#39 and #43) first to see why they were not merged. Done means a FreeBSD system finds the custom CA without SSL_CERT_FILE set, which needs a FreeBSD environment to verify.

Written by the indexing model from the issue text.

Description

I have a FreeBSD 13 system and I am attempted to connect to an internal resource secured by a custom certificate. I have installed the certificate root public keys in /usr/local/share/certs/ca-root-nss.crt and both curl and openssl s_connect will correctly connect to the endpoint. However, it seems that openssl-probe is not checking that location because I get a certificate error while attempting to run rustup-init. If I specify the environment variable SSL_CERT_FILE=/usr/local/share/certs/ca-root-nss.crt then the program works as expected.

Dominant language
Rust
Stars
61
Forks
23
Avg merge
43m
Merged PRs (30d)
2

Getting set up

This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from rustls/openssl-probe

All issues in rustls/openssl-probe

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.