search

adoptium / temurin-build

Eclipse Temurin™ build scripts - common across all releases/versions
Apache License 2.0
1k stars 243 forks source link

Build with podman may require --custom-cacerts #3862

Open judovana opened 6 days ago

judovana commented 6 days ago

When podman support was added - https://github.com/adoptium/temurin-build/pull/3796 - to containerised build, an weird exception was spotted: https://github.com/adoptium/temurin-build/pull/3796#issuecomment-2129582870

Skipping: Telekom Security SMIME ECC Root 2021
Parsing: Telekom Security TLS ECC Root 2020
Skipping: Telekom Security SMIME RSA Root 2023
Parsing: Telekom Security TLS RSA Root 2023
Done (147 CA certs processed, 24 skipped).
mk-ca-bundle.pl generates 147 certificates
Subject: CN=GlobalSign_Root_CA,OU=Root_CA,O=GlobalSign_nv-sa,C=BE
Generated alias: CN=GlobalSign_Root_CA,OU=Root_CA,O=GlobalSign_nv-sa,C=BE
Renaming certs/cert.crt to certs/cn_globalsign_root_ca,ou_root_ca,o_globalsign_nvsa,c_be
ERROR: Certificate alias file already exists certs/cn_globalsign_root_ca,ou_root_ca,o_globalsign_nvsa,c_be
security/mk-cacerts.sh needs ALIAS_FILENAME filter updating to make unique

To workaround it, podman build must be configured with --custom-cacerts Docker build do not suffer this problem. This problem will be solved asap.

judovana commented 5 days ago

https://github.com/adoptium/temurin-build/pull/3796#issuecomment-2188446629