Skip to content

Automatic download of static curl causes certificate problems #24717

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jamespjh opened this issue May 9, 2025 · 0 comments
Open

Automatic download of static curl causes certificate problems #24717

jamespjh opened this issue May 9, 2025 · 0 comments

Comments

@jamespjh
Copy link

jamespjh commented May 9, 2025

The automatic downloading of a static curl introduced at e2501e8 can cause a problem due to lack of certificate files.

The executable downloaded has a default hardcoded certificate path at /./nix/store/6k1wq0nhs6vwxj92vdy2hz7cg1f9997p-openssl-static-x86_64-unknown-linux-musl-3.0.8-etc/etc/ssl/certs. This doesn't exist in many cases.

Can be worked around by setting CURL_CA_BUNDLE=whatever

However, I think this solution of the automatic volunteer download is too fragile, and would recommend reverting to just asking the user to set up a later curl.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant