leanprover-community / leanprover-community/mathlib4
Automatic download of static curl causes certificate problems
Nobody has claimed this yet.
- Dominant language
- Lean
- Stars
- 4.1k
- Forks
- 1.7k
- PR merge metrics
- No merged PRs in 30d
Description
The automatic downloading of a static curl introduced at https://github.com/leanprover-community/mathlib4/commit/e2501e866a8290ed6b15c648b46eb643a3397dbd can cause a problem due to lack of certificate files.
The executable downloaded has a default hardcoded certificate path at /./nix/store/6k1wq0nhs6vwxj92vdy2hz7cg1f9997p-openssl-static-x86_64-unknown-linux-musl-3.0.8-etc/etc/ssl/certs. This doesn't exist in many cases.
Can be worked around by setting CURL_CA_BUNDLE=whatever
However, I think this solution of the automatic volunteer download is too fragile, and would recommend reverting to just asking the user to set up a later curl.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with commit e2501e866a8290ed6b15c648b46eb643a3397dbd and inspect how the static curl is downloaded and invoked. Reproduce the missing-certificate failure, including the CURL_CA_BUNDLE workaround, then verify that the selected change no longer depends on the nonexistent hardcoded certificate path.
Written by the indexing model from the issue text.
Assessment
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100