connection failed due to UnknownIssuer #75
Comments
|
I think it's because the HTTP library used by tlrc doesn't pick up your SSL certificates by default. I've enabled that feature in 3092e01 - could you compile the latest version from the |
|
@acuteenvy still no luck, no matter what i do i got below (running from the latest rust image) |
|
Are you actually using a self-signed certificate or is there a CA that you can include in the image to solve this problem? |
|
@acuteenvy i've actually mounted from my local cert folder and copied them all over to |
|
Could you send the output of |
|
Hello! I'm also having this issue after installing via cargo and again after compiling and running from the Let me know if I can be of any assistance! |
|
Did you actually use the For reference, here's the output of the command on my system |
|
My mistake! Here's what you're after |
|
Can you provide steps to reproduce the error? I don't know what's causing this. |
|
Certainly. In all honesty it's as simple as installing via Here's a screenshot of my cli showing the issue.
The issue also presents when I clone the repo and run the app using Here's another screenshot.
For the record I'm using linux, specifically Pop OS 22.04 LTS. I also did a little digging last night and I'm wondering if it's perhaps something to do with my system's CA. Other than importing development certs for mono and dotnet development (which I've since removed) I can't think of anything else I might have done to compromise this functionality. Let me know if I can do anything else to help. |
Well it must have something to do with the certificates on your system, but I don't know what exactly it is. I just installed PopOS 22.04 on a virtual machine, and everything works for me. It's hard to detect where the issue comes from when I just can't reproduce it no matter what I do. You also seem to have a slightly different issue from @karl19, because Are you absolutely sure you didn't touch your SSL certs? |
|
Fixed it, kinda! I've set Here it is working just fine.
This OS install is years old at this point and so I can't say for certain that I haven't fumbled my SSL certs at some point. It's especially curious since I haven't noticed any SSL issues before now, and a fresh pop installation doesn't have that environment variable set (afaik). Really appreciate you looking into the issue for me, and apologies if I took you on a bit of a wild goose chase. |
|
That's so weird, I finally reproduced this by removing SSL certificates from the system. So the problem is indeed that tlrc cannot find your certificates for some reason.
Yeah, it doesn't. I just checked. If it doesn't work without setting the env variable after that, I have absolutely no idea what's causing this, sorry. |
Just ran this command, commented out the env variable and we're back to square one. Very strange, going to spend some time on it this weekend. Again, really appreciate your help with all this and if you like I can keep you posted if/when I find the culprit. |
|
Hi, I'm facing the same issue on Win10 (Enterprise) edition, when trying to run on $ tldr rg
info: cache is empty, downloading...
info: downloading 'tldr.sha256sums'... FAILED
error: https://github.com/tldr-pages/tldr/releases/latest/download/tldr.sha256sums: Connection Failed: tls connection init failed: invalid peer certificate: UnknownIssuerHowever, I'm able to fetch the file separately: $ Invoke-WebRequest -Uri "https://github.com/tldr-pages/tldr/releases/latest/download/tldr.sha256sums" -OutFile "tldr.sha256sums"
# WorksI'm currently trying to debug the issue, but will appreciate any tips/suggestions in the meantime while working on it. |
|
All the work with certificates is done by rustls. It may be worth looking into issues in their repositories - if something isn't working, it's a problem with the certificate configuration on your system or with rustls itself. rustls/rustls-native-certs#22 may be the issue here. |
|
I'm going to close this, because as I said, there is nothing I can do. If anyone is still facing this issue, most likely something is wrong with your certificate configuration. If you believe everything's fine, please report this upstream to the rustls devs. |
wwmoraes
added a commit
to wwmoraes/dotfiles
that referenced
this issue
Nov 1, 2024
The CLI itself has SSL problems; dev says its a rustls package problem, which not only supports SSL_CERT_FILE but the code uses native_tls and its a mess to pinpoint. tldr-pages/tlrc#75
Closed
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Silly question, do we know why it fails to download from github, but meantime can cUrl? Obviously im behind corp firewall.
tldr nvmcurl -I https://github.com/tldr-pages/tldr/releases/latest/download/tldr.sha256sumsThe text was updated successfully, but these errors were encountered: