search

pyocd / cmsis-pack-manager

A Rust and Python module for handling CMSIS Pack files
Apache License 2.0
27 stars 34 forks source link

cmsis-pack crate does not respect local configuration of root certificates #184

Closed claymation closed 1 year ago

claymation commented 2 years ago

Cache is unable to download packs in enterprise environments with "transparent" TLS-terminating middleboxes:

$ pack-manager cache packs
Caching all packs; this will take some time. Press Control-C to quit.
20:57:14 [WARN] Sending fatal alert BadCertificate
20:57:14 [ERROR] https://sadevicepacksprodus.blob.core.windows.net/idxfile/index.pidx: error trying to connect: invalid certificate: UnknownIssuer

reqwest supports bundling Mozilla's root certificates (rusttls-tls, i.e., rust-tls-webpki-roots) or using the platform's native certificate store (rustls-tls-native-roots). See rustls-native-certs for a comparison of the two approaches.

Consider switching from rust-tls-webpki-roots to rustls-tls-native-roots to support enterprise environments with "transparent" TLS-terminating middleboxes.