x509: failed to load system roots and no roots provided

[drone-plugins]

x509: failed to load system roots and no roots provided

[tboerger]

The standard go http client ignores ca certificates of the system. It could be an option to integrate github.com/jackspirou/syscerts into this plugin.

[xoxys]

Looks outdated but seems to be a solution in general

[tboerger]

It haven't been updated for a while, but still works pretty good.

[xoxys]

What about this? https://golang.org/src/crypto/x509/root_linux.go seems to be a buildin functionality

I am also wondering because i get an error from x509 because not root found

[tboerger]

The client is not configured with any root certs.

And the mentioned lib at least got some windows support which is important for the drone on Windows preparation.

[xoxys]

The client is not configured with any root certs.

Right, but for my understanding all plugins should support the global DRONE_VOLUME variables to passthrough a tls chain

[tboerger]

Right, but for my understanding all plugins should support the global DRONE_VOLUME variables to passthrough a tls chain

Why? That's not defined anywhere. Beside that, DRONE_VOLUMES can mount anything, not only certs.

[xoxys]

You are right there is no definition for a standard way to handle self signed vertificates in drone and over the whol pipeline. But there should be a global method... because for now it is a mess if you use self signed certificates. You dont think so?

From what i am reading here https://discourse.drone.io/t/0-8-git-self-signed-problem/974 it sound like "you can do it that way and it works" and not like "maybe it works maybe not, who knows"

[tboerger]

The plugin got to support custom root certificates. If it doesn't support it feel free to contribute it.

By gitea instance also uses a custom root certificate and it works fine.

[xoxys]

works