rig icon indicating copy to clipboard operation
rig copied to clipboard

Rig 0.7.0 does not work with Proxy and Internal CA Certs on MacOS

Open chrisphe opened this issue 1 year ago • 4 comments

Whilst Rig 0.6.0 works perfectly on MacOS, with 0.7.0 I saw an error regarding certificate validation on MacOS:

[ERROR] Cannot download JSON: error sending request for url (https://api.r-hub.io/versions/available/macos/arm64): error trying to connect: invalid peer certificate: UnknownIssuer

I suspect that Rig is no longer making using of SSL_CERT_FILE.

chrisphe avatar Apr 26 '24 09:04 chrisphe

This is probably because rig switched to rustls instead of openssl. I'll look into how to use the certs with rustls.

gaborcsardi avatar Apr 26 '24 14:04 gaborcsardi

There's a couple of options - this PR seems to address this https://github.com/rustls/rustls-native-certs/pull/32 Also https://github.com/rustls/rustls-native-certs

chrisphe avatar Apr 29 '24 11:04 chrisphe

By way of update, I wanted to mention this issue is also occurring on Linux, so I would assume it exists on all platforms in 0.7.0.

chrisphe avatar May 15 '24 08:05 chrisphe

Just adding another bump to this issue; my organization also requires use of Proxy and Internal CA Certs and so due to this issue we are no longer able to use Rig starting with version 0.7.0. Would be grateful to see this ability restored as it was before this latest release to allow us to stay up-to-date, and many thanks.

cxgillis avatar Jul 01 '24 17:07 cxgillis

I've been following this issue for a bit, but I'll also go ahead and add another bump. Running rig add in my organization fails with certificate errors on both Linux and Windows machines with rig version 0.7.0.

rennerom avatar Oct 30 '24 16:10 rennerom

For me it is the same. I am unfortunately not able to use rig now, also because I cannot access the previous version anywhere.

InkaSpy avatar Dec 10 '24 12:12 InkaSpy

also because I cannot access the previous version anywhere.

All releases, including older ones, are at https://github.com/r-lib/rig/releases

gaborcsardi avatar Dec 10 '24 12:12 gaborcsardi

Thanks for the pointers and sorry for the long wait! This should be fixed now in dev, and there'll be a release very soon.

If you can build rig locally on your machine, then you can also test it now.

gaborcsardi avatar Apr 10 '25 12:04 gaborcsardi