search

safing / portmaster-packaging

Portmaster packages and installers
GNU General Public License v3.0
49 stars 22 forks source link

Fix debian package dependency for server installs #91

Closed mattkeenan closed 1 year ago

mattkeenan commented 1 year ago

What happened:

An install on a minimally installed system (say Ubuntu or Debian) will fail as certificates aren't loaded on the system (these trusted certificate list is always installed on desktop machine).

portmaster fails to install because there are no trusted certificates to very the SSL/TLS connections to download the main software.

This affects portmaster installs on servers / containers / iot.

What did you expect to happen?:

Successful install

How did you reproduce it?:

install either a debian or ubuntu system using debootstrap, then attempt to install portmaster.

Proposed fix:

Add ca-certificates to the depends package list. I have a fix for this, and I'm going to test is and update this issue and post a PR.

Debug Information:

[pmstart] 2023/07/20 10:51:44 WARNING: error loading indexes: failed to fetch index all/intel/intel.json: failed to make request to "https://updates.safing.io/all/intel/intel.json": Get "https://updates.safing.io/all/intel/intel.json": tls: failed to verify certificate: x509: certificate signed by unknown authority Error: failed to fetch index all/intel/intel.json: failed to make request to "https://updates.safing.io/all/intel/intel.json": Get "https://updates.safing.io/all/intel/intel.json": tls: failed to verify certificate: x509: certificate signed by unknown authority

dhaavi commented 1 year ago

Fixed by #92.