Page MenuHomePhabricator

Use default ca path of curl if not defined otherwise
Closed, WontfixPublic

Description

Arcanist complained about not being able to verify the HTTPS connection.

The CA cert was integrated into the systems ca-bundle. I could successfully use "curl https://phabricator.local.domain". Only arc complained about not being able to verify.

"curl-config --ca" points to:
RHEL6: /etc/pki/tls/certs/ca-bundle.crt (updated by update-ca-trust)
Ubuntu 14.04: /etc/ssl/certs/ca-certificates.crt (updated by update-ca-certificates)

Seems the PHP curl >= 5.3.7 has the curl.cainfo ption which is empty by default can't be used as default value.

I propose to set the default path to the systems ca bundle file.

Event Timeline

vinzent raised the priority of this task from to Needs Triage.
vinzent updated the task description. (Show Details)
vinzent added a project: libphutil.
vinzent added a subscriber: vinzent.
chad triaged this task as Low priority.Nov 2 2014, 7:59 PM
epriestley claimed this task.
epriestley added a subscriber: epriestley.

We haven't seen other users encounter this issue in several years.