tool doesn't support OS level certificates

[justinabrahms]

Description

rover does not respect my OS level certificates.

Steps to reproduce

1. Have an endpoint which uses certificates not signed by a central authority.
2. Add the signer to your trust store.
3. Make a request to it with rover graph introspect https://...

Expected result

You get the introspection results.

Actual result

You get a certificate error (but has a misleading error message due to #644)

Environment

Rover Info:
Version: 0.1.7
Install Location: /home/jabrahms/.rover/bin/rover
OS: Ubuntu 20.04 (focal) [64-bit]
Shell: /bin/bash

[EverlastingBugstopper]

Ah - this was most likely introduced in #624. I switched our TLS backend to rustls since I wanted folks to be able to run rover on slim Docker images that usually don't come with ca-certificates preinstalled.

We can switch back to using the default TLS backend and it should resolve this issue, and we'll just document that you need ca-certificates installed to run Rover.

[justinabrahms]

@EverlastingBugstopper Have you seen https://github.com/rustls/rustls-native-certs ? I saw when looking up this problem.

[EverlastingBugstopper]

I did see that actually! Might try to go that route. I'll cc you on that when it happens and maybe you can try it out to make sure it works OK.

[justinabrahms]

Happy to. Just tag me in your branch. Happy to compile it and test it out.

…

On Wed, Jun 30, 2021, at 12:56 PM, Avery Harnish wrote: I did see that actually! Might try to go that route. I'll cc you on that when it happens and maybe you can try it out to make sure it works OK. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#645 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAA6DN3HTQ3S3V3Y7NULPDTVNZF7ANCNFSM47RQXOZA>.