yusufipek/dikte
1
0
Fork 0
mirror of https://github.com/yusufipk/dikte.git synced 2026-09-11 10:56:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Carry the two paths the RHEL family uses as well

Browse Source 
The list was four of the six that Go's crypto/x509 and curl both carry.
The missing two are the bundle under /etc/pki/ca-trust, which is where
RHEL 7 and CentOS keep it, and OpenELEC's. Neither is likely and both are
one line.

The rest was checked in containers rather than assumed: the first entry
answers Debian, Ubuntu, Arch, Gentoo, Fedora and Alpine, and openSUSE is
the only common distribution that needs a different one.
This commit is contained in:
yusufipek
2026-08-16 15:29:29 +03:00
parent e7d0a37f79
commit 4ca66b1e03
1 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dikte/integrate.py
+12 -6
View File
@@ -95,13 +95,19 @@ def restore_library_path():
return moved return moved
# Where the distributions keep the trust store. One list rather than a guess # Where the trust store is, which is not one place but is a short list of them:
# per distribution, in the order curl and Go try them. # every distribution takes its layout from one of four packages rather than
# inventing one, and this is the list Go's crypto/x509 and curl both carry. The
# first line alone answers Debian, Ubuntu, Arch, Gentoo, Fedora and Alpine,
# which was checked rather than assumed; the rest are the ones that do it their
# own way.
CA_FILES = ( CA_FILES = (
"/etc/ssl/certs/ca-certificates.crt", # Debian, Ubuntu, Arch, Gentoo "/etc/ssl/certs/ca-certificates.crt", # Debian and everything after it
"/etc/pki/tls/certs/ca-bundle.crt", # Fedora, RHEL "/etc/pki/tls/certs/ca-bundle.crt", # Fedora, RHEL
"/etc/ssl/ca-bundle.pem", # openSUSE "/etc/ssl/ca-bundle.pem", # openSUSE
"/etc/ssl/cert.pem", # Alpine, and macOS "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem", # RHEL 7 and CentOS
"/etc/pki/tls/cacert.pem", # OpenELEC
"/etc/ssl/cert.pem", # Alpine, and macOS
) )
CA_DIRECTORIES = ("/etc/ssl/certs", "/etc/pki/tls/certs") CA_DIRECTORIES = ("/etc/ssl/certs", "/etc/pki/tls/certs")