Re: Nuget Alpine - trust errors
David Curylo <[email protected]> Mon, 19 Jun 2017 21:28:45 -0400
| Newsgroups | gmane.comp.gnome.mono.general |
|---|---|
| Message-ID | <[email protected]> |
--===============0151448868121617152== Content-Type: multipart/alternative; boundary="Apple-Mail=_F03C16A2-C25C-4E22-952E-A8C2C5C0761E" --Apple-Mail=_F03C16A2-C25C-4E22-952E-A8C2C5C0761E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This seemed to do the trick: cat /etc/ssl/cert/*.pem > /tmp/ca-certs.pem cert-sync /tmp/ca-certs.pem rm /tmp/ca-certs.pem I=E2=80=99m not sure if there is some other order of operations that = would have worked better, like maybe installing ca-certificates before = mono, but I=E2=80=99m glad for cert-sync. Thanks, Dave > On Jun 19, 2017, at 7:00 PM, Martin Thwaites = <[email protected]> wrote: >=20 > Have you tried using Mozroots... not sure if that's still the thing to = use to import all the certificates... >=20 > On 19 June 2017 at 22:41, David Curylo <[email protected] = <mailto:[email protected]>> wrote: > Hey everyone, I=E2=80=99m reaching out for some help with mono 5.0.1 = on Alpine. >=20 > I=E2=80=99m attempting to use nuget on Alpine to install a package, = but I=E2=80=99m hitting trust issues. >=20 > I downloaded nuget.exe with `wget https://nuget.org/nuget.exe` = <https://nuget.org/nuget.exe%60> after I installed ca-certificates and = openssl, but this doesn=E2=80=99t seem to be enough to satisfy nuget = itself. Any tips? This is the error I get, but I can=E2=80=99t seem to = get around it. >=20 > Error: TrustFailure (Ssl error:1000007d:SSL = routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED > at = /home/buildozer/aports/testing/mono/src/mono-5.0.1.1/external/boringssl/ss= l/handshake_client.c:1132) >=20 > Thanks, > Dave >=20 > _______________________________________________ > Mono-list maillist - [email protected] = <mailto:[email protected]> > http://lists.dot.net/mailman/listinfo/mono-list = <http://lists.dot.net/mailman/listinfo/mono-list> >=20 >=20 --Apple-Mail=_F03C16A2-C25C-4E22-952E-A8C2C5C0761E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div class=3D"">This seemed to do the trick:</div><div = class=3D""><br class=3D""></div><font face=3D"Consolas" class=3D"">cat = /etc/ssl/cert/*.pem > /tmp/ca-certs.pem</font><div class=3D""><font = face=3D"Consolas" class=3D"">cert-sync = /tmp/ca-certs.pem</font></div><div class=3D""><font face=3D"Consolas" = class=3D"">rm /tmp/ca-certs.pem</font></div><div class=3D""><br = class=3D""></div><div class=3D"">I=E2=80=99m not sure if there is some = other order of operations that would have worked better, like maybe = installing ca-certificates before mono, but I=E2=80=99m glad for = cert-sync.</div><div class=3D""><br class=3D""></div><div = class=3D"">Thanks,</div><div class=3D"">Dave</div><div class=3D""><br = class=3D""><div><blockquote type=3D"cite" class=3D""><div class=3D"">On = Jun 19, 2017, at 7:00 PM, Martin Thwaites <<a = href=3D"mailto:[email protected]" = class=3D"">[email protected]</a>> wrote:</div><br = class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" = class=3D"">Have you tried using Mozroots... not sure if that's still the = thing to use to import all the certificates...</div><div = class=3D"gmail_extra"><br class=3D""><div class=3D"gmail_quote">On 19 = June 2017 at 22:41, David Curylo <span dir=3D"ltr" class=3D""><<a = href=3D"mailto:[email protected]" target=3D"_blank" = class=3D"">[email protected]</a>></span> wrote:<br = class=3D""><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 = .8ex;border-left:1px #ccc solid;padding-left:1ex"><div = style=3D"word-wrap:break-word" class=3D""><div class=3D"">Hey everyone, = I=E2=80=99m reaching out for some help with mono 5.0.1 on = Alpine.</div><div class=3D""><br class=3D""></div>I=E2=80=99m attempting = to use nuget on Alpine to install a package, but I=E2=80=99m hitting = trust issues.<div class=3D""><br class=3D""></div><div class=3D"">I = downloaded nuget.exe with `wget <a href=3D"https://nuget.org/nuget.exe%60"= target=3D"_blank" class=3D"">https://nuget.org/nuget.exe`</a> <wbr = class=3D"">after I installed ca-certificates and openssl, but this = doesn=E2=80=99t seem to be enough to satisfy nuget itself. Any = tips? This is the error I get, but I can=E2=80=99t seem to get = around it.<br class=3D""><div class=3D""><br class=3D""></div><div = class=3D""><div = style=3D"margin:0px;font-size:14px;line-height:normal;font-family:'Andale = Mono';color:rgb(195,55,32);background-color:rgb(0,0,0)" class=3D""><span = style=3D"font-variant-ligatures:no-common-ligatures" class=3D"">Error: = TrustFailure (Ssl error:1000007d:SSL routines:OPENSSL_internal:<wbr = class=3D"">CERTIFICATE_VERIFY_FAILED</span></div><div = style=3D"margin:0px;font-size:14px;line-height:normal;font-family:'Andale = Mono';color:rgb(195,55,32);background-color:rgb(0,0,0)" class=3D""><span = style=3D"font-variant-ligatures:no-common-ligatures" class=3D""> = at /home/buildozer/aports/<wbr = class=3D"">testing/mono/src/mono-5.0.1.1/<wbr = class=3D"">external/boringssl/ssl/<wbr = class=3D"">handshake_client.c:1132)</span></div></div></div><div = class=3D""><br class=3D""></div><div class=3D"">Thanks,</div><div = class=3D"">Dave</div></div><br = class=3D"">______________________________<wbr = class=3D"">_________________<br class=3D""> Mono-list maillist - <a = href=3D"mailto:[email protected]" = class=3D"">[email protected]</a><br class=3D""> <a href=3D"http://lists.dot.net/mailman/listinfo/mono-list" = rel=3D"noreferrer" target=3D"_blank" = class=3D"">http://lists.dot.net/mailman/<wbr = class=3D"">listinfo/mono-list</a><br class=3D""> <br class=3D""></blockquote></div><br class=3D""></div> </div></blockquote></div><br class=3D""></div></body></html>= --Apple-Mail=_F03C16A2-C25C-4E22-952E-A8C2C5C0761E-- --===============0151448868121617152== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KTW9uby1saXN0 IG1haWxsaXN0ICAtICBNb25vLWxpc3RAbGlzdHMuZG90Lm5ldApodHRwOi8vbGlzdHMuZG90Lm5l dC9tYWlsbWFuL2xpc3RpbmZvL21vbm8tbGlzdAo= --===============0151448868121617152==--