Skip to content
This repository was archived by the owner on Sep 29, 2025. It is now read-only.

Conversation

@deivid-rodriguez
Copy link
Contributor

@deivid-rodriguez deivid-rodriguez commented Mar 26, 2025

It's unclear why this extra file is checked on Linux since it was not explained when originally introduced.

In addition to that, this may hide real issues when this additional file does not exist but the actual problem is with the value in ENV["SSL_CERT_FILE"], for example, because of an unexpanded tilde.

This would've made the problem in ruby/rubygems#8578 more evident.

It's unclear why this extra file is checked on Linux since it was not
explained when originally introduced.

In addition to that, this may hide real issues when this additional file
does not exist by the actual problem is with the value in
`ENV["SSL_CERT_FILE"]`, for example, because of an unexpanded tilde.
@duckinator
Copy link
Contributor

So, /etc/ssl/certs/ca-certificates.crt is the "traditional" location for some Linux distros. But if OpenSSL isn't using it I don't think it's relevant. On Debian-based systems, /usr/lib/ssl/cert.pem (the newer location for it) is now a symlink to it anyway.

@duckinator duckinator merged commit b1031dd into master Mar 26, 2025
46 checks passed
@duckinator duckinator deleted the deivid-rodriguez/improve-certificate-info branch March 26, 2025 21:13
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants