Page MenuHomeFreeBSD

devel/uv: Make the selected TLS provider use the system default truststore
ClosedPublic

Authored by michaelo on Oct 30 2025, 9:55 PM.
Tags
None
Referenced Files
F154423777: D53490.diff
Tue, Apr 28, 11:15 AM
Unknown Object (File)
Mon, Apr 27, 6:32 AM
Unknown Object (File)
Fri, Apr 24, 8:29 PM
Unknown Object (File)
Mon, Apr 20, 12:05 PM
Unknown Object (File)
Sat, Apr 18, 2:34 PM
Unknown Object (File)
Thu, Apr 16, 3:07 AM
Unknown Object (File)
Thu, Apr 16, 1:32 AM
Unknown Object (File)
Sun, Apr 12, 2:13 PM
Subscribers

Details

Summary

uv uses openssl_probe::probe() transitively which unfortunately discovers the
wrong truststore sources resulting in certificate validation errors even if
certctl(8) manages everything nicely. The selected provider might be OpenSSL
from the system, vendored OpenSSL, rustls or maybe something else.

Note: uv still requires you to use --native-tls or UV_NATIVE_TLS=1

Approved by: yuri (maintainer), mikael (rust maintainer)
Obtained from: https://github.com/alexcrichton/openssl-probe/pull/39
MFH: 2025Q4

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable