docs icon indicating copy to clipboard operation
docs copied to clipboard

[question] What is the recommended way to manage SSL certificate with conan for windows and linux

Open MamaTierra opened this issue 1 year ago • 19 comments

What is your question?

Hi ! I'm try to setup jfrog artifactory CE as conan remote with https. I'm a little confused on the way to handle a self certificate both on linux and windows platform.

Environment details

  • Conan version: 2.0.17
  • Python version: 3.11.6
  • Requests version: 2.31.0

Here what is working for me now:

On Linux:

I managed to add my certificate (.crt format) to system certificates via update-ca-certificates command on debian based distrib and setup conan to use it via core.net.http:cacert_path=/etc/ssl/certs/ca-certificates.crt in .conan2/global.conf

On Windows:

I found no better way to use the python package pip-system-certs that is a runtime patch to python package requests to use system certificate.

Here what is not working for me:

core.net.http:cacert_path=/path/to/my_certificate.crt in .conan2/global.conf give me

ERROR: HTTPSConnectionPool(host='conan.xxx.com', port=443): Max retries exceeded with url: /artifactory/api/conan/xxx/v1/ping (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))

My question

What would be the recommended way to manage SSL certificate with conan for windows and linux ?

Have you read the CONTRIBUTING guide?

  • [X] I've read the CONTRIBUTING guide

MamaTierra avatar Jan 26 '24 19:01 MamaTierra