/etc/ssl/certs/ca-bundle.crt no longer discovered on Linux
Nobody has claimed this yet.
- #49 by @autrilla — closed without merging
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 35/100
Research direction
Start with commit a0ae1a2a33b91eb19b69ec25c5c448040aaaaf37, which changed the certificate search so that relative names like certs/ca-bundle.crt are no longer tried under candidate directories such as /etc/ssl. Check the closed, unmerged PR #49 to see what was already attempted. Done means /etc/ssl/certs/ca-bundle.crt is discovered again on Linux while ca-certificates.crt still is, which you can verify with a test that lays out a fake /etc/ssl tree.
Written by the indexing model from the issue text.
Description
There seems to be a regression caused by commit a0ae1a2a33b91eb19b69ec25c5c448040aaaaf37 for Linux images that expose the CA bundle at /etc/ssl/certs/ca-bundle.crt. In my case, it's a Docker image built with Nix. Before that commit, openssl-probe would search relative names like certs/ca-bundle.crt under candidate dirs such as /etc/ssl, so it would find /etc/ssl/certs/ca-bundle.crt. After the change, /etc/ssl/certs/ca-certificates.crt would be included, but /etc/ssl/certs/ca-bundle.crt is not. I depend on openssl-probe through native-tls, and upgrading from 0.2.13 to 0.2.18 bumps openssl-probe from 0.1.6 to 0.2.1, resulting in breakage.
- Dominant language
- Rust
- Stars
- 61
- Forks
- 23
- Avg merge
- 43m
- Merged PRs (30d)
- 2
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from rustls/openssl-probe
-
Difficulty 2/5 1-3 hours Newbie friendliness 58/100
rustls/openssl-probe#50 · 4 comments ·
-
try_init_openssl_env_vars() breaks certificate validation (on FreeBSD)May be free again A pull request for this issue was closed without being merged. Open
Difficulty 4/5 3-5 days Newbie friendliness 18/100
rustls/openssl-probe#37 · 1 comment · 1 reaction ·
-
Support for WindowsOpen
Difficulty 3/5 1-2 days Newbie friendliness 35/100
rustls/openssl-probe#23 · 1 comment ·
-
Freebsd certs not foundMay be free again A pull request for this issue was closed without being merged. Open
Difficulty 2/5 1-3 hours Newbie friendliness 30/100
rustls/openssl-probe#20 · 2 comments ·
-
Difficulty 4/5 3-5 days Newbie friendliness 15/100
rustls/openssl-probe#8 · 6 comments ·
All issues in rustls/openssl-probe
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
Eyevinn/open-live-ingest#36 · 1 comment ·
Maintainers usually reply within 1 day
-
app
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
bug bug jury peripheral:i2s
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
esp-rs/esp-hal#6828 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
Maintainers usually reply within 1 day
-
ライブラリを追加Openpriority middle
Difficulty 1/5 Under an hour Newbie friendliness 62/100
KATO-Hiro/AtCoderClans#13015 ·
Maintainers usually reply within 1 day