Page MenuHomeFreeBSD

devel/uv: Make the selected TLS provider use the system default truststore
ClosedPublic

Authored by michaelo on Thu, Oct 30, 9:55 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Nov 9, 4:01 PM
Unknown Object (File)
Sat, Nov 8, 3:10 PM
Unknown Object (File)
Fri, Nov 7, 2:04 AM
Unknown Object (File)
Fri, Nov 7, 2:03 AM
Unknown Object (File)
Fri, Nov 7, 2:03 AM
Unknown Object (File)
Thu, Nov 6, 9:32 PM
Unknown Object (File)
Mon, Nov 3, 10:35 AM
Unknown Object (File)
Mon, Nov 3, 10:32 AM
Subscribers

Details

Summary

uv uses openssl_probe::probe() transitively which unfortunately discovers the
wrong truststore sources resulting in certificate validation errors even if
certctl(8) manages everything nicely. The selected provider might be OpenSSL
from the system, vendored OpenSSL, rustls or maybe something else.

Note: uv still requires you to use --native-tls or UV_NATIVE_TLS=1

Approved by: yuri (maintainer), mikael (rust maintainer)
Obtained from: https://github.com/alexcrichton/openssl-probe/pull/39
MFH: 2025Q4

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable