Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Jan 2018 18:56:43 +0000
From:      bugzilla-noreply@freebsd.org
To:        emulation@FreeBSD.org
Subject:   [Bug 221538] ftp/linux-c7-curl: curl: (77) Problem with the SSL CA cert (path? access rights?)
Message-ID:  <bug-221538-4077-fdUdO1W84M@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-221538-4077@https.bugs.freebsd.org/bugzilla/>
References:  <bug-221538-4077@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D221538

--- Comment #5 from David Naylor <dbn@FreeBSD.org> ---
With the update to CentOS 7 we now have a new problem:
curl -v https://api.nuget.org/v3/index.json
* About to connect() to api.nuget.org port 443 (#0)
*   Trying 93.184.221.200...
* Connected to api.nuget.org (93.184.221.200) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* Unable to initialize NSS database
* Initializing NSS with certpath: none
* WARNING: failed to load NSS PEM library libnsspem.so. Using OpenSSL PEM
certificates will not work.
* Closing connection 0
curl: (77) Problem with the SSL CA cert (path? access rights?)

I've got a patch for this issue which I will post to Phabricator tomorrow(t=
m).=20=20

Regarding the underlying issue of SSL CA certificates not being installed f=
or
linux-curl, how should we solve this?  I think using ca-certificates is a
duplicate of ca_root_nss and that we should either a) do nothing, or b) add=
 a
pkg-message to nss(?) indicating the step required to get certificates to w=
ork?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-221538-4077-fdUdO1W84M>