conan-io / conan-io/docs

[question] What is the recommended way to manage SSL certificate with conan for windows and linux

Open
#3,732 19 comments 0 reactions 1 assignee Claimed by @memsharded View on GitHub
stage: triaging
Dominant language
C++
Stars
125
Forks
382
Avg merge
22h 39m
Merged PRs (30d)
21

Description

### What is your question?

Hi ! I'm try to setup jfrog artifactory CE as conan remote with https.
I'm a little confused on the way to handle a self certificate both on linux and windows platform.

## Environment details

- Conan version: 2.0.17
- Python version: 3.11.6
- Requests version: 2.31.0

## Here what is working for me now:

### On Linux:
I managed to add my certificate (.crt format) to system certificates via `update-ca-certificates` command on debian based distrib and setup conan to use it via `core.net.http:cacert_path=/etc/ssl/certs/ca-certificates.crt` in `.conan2/global.conf`

### On Windows:
I found no better way to use the python package `pip-system-certs` that is a runtime patch to python package `requests` to use system certificate.

## Here what is not working for me:
`core.net.http:cacert_path=/path/to/my_certificate.crt` in `.conan2/global.conf` give me
```
ERROR: HTTPSConnectionPool(host='conan.xxx.com', port=443): Max retries exceeded with url: /artifactory/api/conan/xxx/v1/ping (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)')))
```

## My question
What would be the recommended way to manage SSL certificate with conan for windows and linux ?

### Have you read the CONTRIBUTING guide?

- [X] I've read the CONTRIBUTING guide

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.