mirror of
https://github.com/yusufipk/dikte.git
synced 2026-09-11 10:56:10 +00:00
yusufipek
4cec05fa49
A build carries the OpenSSL of the machine it was built on, and that OpenSSL has one directory compiled into it as the only place it looks for certificates. For an AppImage built on Ubuntu that is /usr/lib/ssl, which Arch, Fedora and openSUSE do not have, so on any of them every HTTPS request fails with CERTIFICATE_VERIFY_FAILED: transcription and cleanup report it as a rejected key, and the model downloads fail too. Ask the machine instead, from the list curl and Go use, and only when the build's own answer turns out not to exist. The store on the machine rather than a copy carried along, because a copy goes stale as roots are rotated and would ignore a certificate somebody added themselves. Anybody who has already set SSL_CERT_FILE is left alone.