Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

curl: display proper error message when encountering not trusted certificate #351920

Closed

Conversation

SuperSandro2000
Copy link
Member

@SuperSandro2000 SuperSandro2000 commented Oct 28, 2024

Right now the error message would be:
curl: (35) OpenSSL/3.3.2: error:80000002:system library::No such file or directory

Before it was:
curl: (35) OpenSSL/3.0.8: error:16000069:STORE routines::unregistered scheme

see curl/curl#10702

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

@SuperSandro2000 SuperSandro2000 changed the title curl: display proper error message when encountering not trusted cert… curl: display proper error message when encountering not trusted certificate Oct 28, 2024
@SuperSandro2000 SuperSandro2000 changed the base branch from master to staging October 28, 2024 15:41
@ofborg ofborg bot added the 2.status: merge conflict This PR has merge conflicts with the target branch label Oct 28, 2024
Copy link
Member

@lf- lf- left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

wow, that's absolutely haunted. thanks for finding it.

@wegank wegank added the 12.approvals: 1 This PR was reviewed and approved by one reputable person label Jan 10, 2025
…ificate

Right now the error message would be:
curl: (35) OpenSSL/3.3.2: error:80000002:system library::No such file or directory

Before it was:
curl: (35) OpenSSL/3.0.8: error:16000069:STORE routines::unregistered scheme

see curl/curl#10702
@ofborg ofborg bot removed the 2.status: merge conflict This PR has merge conflicts with the target branch label Jan 25, 2025
@nix-owners nix-owners bot requested a review from lovek323 January 25, 2025 16:17
@wegank wegank removed the 12.approvals: 1 This PR was reviewed and approved by one reputable person label Jan 25, 2025
@@ -163,7 +163,7 @@ stdenv.mkDerivation (finalAttrs: {
"--without-ca-path"
] ++ lib.optionals (!gnutlsSupport && !opensslSupport && !wolfsslSupport && !rustlsSupport) [
"--without-ssl"
] ++ lib.optionals (rustlsSupport && !stdenv.hostPlatform.isDarwin) [
] ++ lib.optionals ((opensslSupport || rustlsSupport) && !stdenv.hostPlatform.isDarwin) [
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

may still not fix the problem on Darwin; unsure the lineage of this code

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can't test darwin at the moment.

@SuperSandro2000
Copy link
Member Author

I just retested this locally and at least for me this issue is now fixed. I am not sure why which change exactly fixed it though.

@SuperSandro2000 SuperSandro2000 deleted the curl-cert-not-trusted branch January 25, 2025 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants