[chef] Re: Re: Re: Chef * + bundled SSL cert bundles are not delightful

[Tensibai < >]

Le 2015-10-02 11:35, Tomasz Torcz a écrit :

On Fri, Oct 02, 2015 at 10:57:15AM +0200, Tensibai wrote:

 

Just a guess (unverified), but for bundler I had to use the environment
variable SSL_CERT_FILE and point it to embedded/ssl/certs for it to work
under windows. Maybe httpclient could take this env variable too ?

  It would be much better if Chef used one cert store, not a number of them.
It would be perfect if Chef just used system CA store.

If you're willing to make something to parse Windows system cert store to something like a .pem cert store on the fly, you're welcome to contribute it ;) (But it's really harder than it seems)