Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cannot install certs on Debian #23

Closed
ju1ius opened this issue Oct 21, 2023 · 0 comments · Fixed by #24
Closed

cannot install certs on Debian #23

ju1ius opened this issue Oct 21, 2023 · 0 comments · Fixed by #24
Assignees

Comments

@ju1ius
Copy link
Contributor

ju1ius commented Oct 21, 2023

Hi,

Installing a certificate into to the system trust store is broken on Debian Sid (see also: smallstep/cli#1043).

$ cat /etc/debian_version
trixie/sid
$ ./bin/truststore my_cert.crt
install is not supported on this system

On Debian the update-ca-certificates binary is located under /usr/sbin, which is not in the path of non-root users.

This causes the exec.LookPath call in truststore_linux.go's init function to always fail and setting SystemTrustCommand to nil, which in turn causes installPlatform to incorrectly return ErrNotSupported.

Since the command (and the equivalent step certificate install and step ca bootstrap --install) should not be run as root, the exec.LookPath check should be removed from the init function, letting commandWithSudo(SystemTrustCommand...) fail (with an actually useful message) if SystemTrustCommand is not found, which is what mkcert does.

maraino added a commit that referenced this issue Oct 24, 2023
removes init $PATH checks from trustore_linux.go
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants