search

rust-cross / rust-musl-cross

Docker images for compiling static Rust binaries using musl-cross
MIT License
620 stars 68 forks source link

Use non-retired Let's Encrypt certificate #41

Closed Swagadon closed 2 years ago

Swagadon commented 2 years ago

I had some unexpected failures when doing a https request to a website in an integration test running inside this image:

error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1914: (unable to get issuer certificate)

    Caused by:
        0: error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1914: (unable to get issuer certificate)
        1: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1914: (unable to get issuer certificate)
        2: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1914:

It looks as if https://letsencrypt.org/certificates/ has updated recently (Oct 2nd) and marked the certificate currently in use in the image as "retired". Replacing it with the non-cross signed one listed above on the let's encrypt website fixed the test.

messense commented 2 years ago

Thanks!