cloudflare / cloudflare/boring

Few doubts about Boring and certificates

Open
#91 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
522
Forks
171
PR merge metrics
No merged PRs in 30d

Description

I am using ([a fork of](https://github.com/4JX/boring)) boring in a project of mine and I'm having some trouble with making it use the correct certificates

1. On my Windows machine I am encountering the error `unable to get local issuer certificate`. Reading up on a similar issue in `rust-openssl`, I tried to find a way to set the env var `SSL_CERT_DIR` to a path to the system's certificate store, but it seems they are stored on the registry, so I'm also trying to tackle this another way by:
2. Integrating [webpki-roots](https://github.com/rustls/webpki-roots) with a `SslConnectorBuilder`, but I do not see a way to add them as `X509` into the cert store due to the format they are stored in (`rustls` has a [specific method](https://docs.rs/rustls/latest/rustls/struct.OwnedTrustAnchor.html#method.from_subject_spki_name_constraints) for that for example)

Is there anything that may be useful in tackling these issues?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.