{"action":"created","issue":{"url":"https://api.github.com/repos/OpenELEC/OpenELEC.tv/issues/4941","repository_url":"https://api.github.com/repos/OpenELEC/OpenELEC.tv","labels_url":"https://api.github.com/repos/OpenELEC/OpenELEC.tv/issues/4941/labels{/name}","comments_url":"https://api.github.com/repos/OpenELEC/OpenELEC.tv/issues/4941/comments","events_url":"https://api.github.com/repos/OpenELEC/OpenELEC.tv/issues/4941/events","html_url":"https://github.com/OpenELEC/OpenELEC.tv/issues/4941","id":152811186,"number":4941,"title":"SSL CA bundle is in a non-standard place for Linux distros","user":{"login":"ncw","id":536803,"avatar_url":"https://avatars.githubusercontent.com/u/536803?v=3","gravatar_id":"","url":"https://api.github.com/users/ncw","html_url":"https://github.com/ncw","followers_url":"https://api.github.com/users/ncw/followers","following_url":"https://api.github.com/users/ncw/following{/other_user}","gists_url":"https://api.github.com/users/ncw/gists{/gist_id}","starred_url":"https://api.github.com/users/ncw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncw/subscriptions","organizations_url":"https://api.github.com/users/ncw/orgs","repos_url":"https://api.github.com/users/ncw/repos","events_url":"https://api.github.com/users/ncw/events{/privacy}","received_events_url":"https://api.github.com/users/ncw/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-05-03T16:01:47Z","updated_at":"2016-05-03T22:53:11Z","closed_at":null,"body":"This is causing a problem for ncw/rclone#466 as the go runtime can't find the SSL certificates in openelec 7 beta.\r\n\r\nGo doesn't use openssl it has its own SSL implementation, but it relies on finding the root certificates in a standard place.\r\n\r\nThe Go runtime looks for SSL certificates in these places (note the openelec < 7 work-around).\r\n\r\n```\r\n// Possible certificate files; stop after finding one.\r\nvar certFiles = []string{\r\n\t\"/etc/ssl/certs/ca-certificates.crt\", // Debian/Ubuntu/Gentoo etc.\r\n\t\"/etc/pki/tls/certs/ca-bundle.crt\",   // Fedora/RHEL\r\n\t\"/etc/ssl/ca-bundle.pem\",             // OpenSUSE\r\n\t\"/etc/pki/tls/cacert.pem\",            // OpenELEC\r\n}\r\n```\r\n\r\nand from these directories\r\n\r\n```\r\n// Possible directories with certificate files; stop after successfully\r\n// reading at least one file from a directory.\r\nvar certDirectories = []string{\r\n        \"/etc/ssl/certs\",               // SLES10/SLES11, https://golang.org/issue/12139\r\n        \"/system/etc/security/cacerts\", // Android\r\n}\r\n```\r\n\r\nI can propose a change to the go project to look in `/etc/ssl/cert.pem` but it seems to me that storing the CA bundle in one of the standard places (or back in `/etc/pki/tls/cacert.pem`) would be a better idea for openelec and avoid the go source becoming cluttered up with openelec exceptions!\r\n\r\nThis change was introduced in c2e0fdc85cd3c05e9eee2b1760f426ff30695138 as far as I can see"},"comment":{"url":"https://api.github.com/repos/OpenELEC/OpenELEC.tv/issues/comments/216689001","html_url":"https://github.com/OpenELEC/OpenELEC.tv/issues/4941#issuecomment-216689001","issue_url":"https://api.github.com/repos/OpenELEC/OpenELEC.tv/issues/4941","id":216689001,"user":{"login":"escalade","id":2026357,"avatar_url":"https://avatars.githubusercontent.com/u/2026357?v=3","gravatar_id":"","url":"https://api.github.com/users/escalade","html_url":"https://github.com/escalade","followers_url":"https://api.github.com/users/escalade/followers","following_url":"https://api.github.com/users/escalade/following{/other_user}","gists_url":"https://api.github.com/users/escalade/gists{/gist_id}","starred_url":"https://api.github.com/users/escalade/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/escalade/subscriptions","organizations_url":"https://api.github.com/users/escalade/orgs","repos_url":"https://api.github.com/users/escalade/repos","events_url":"https://api.github.com/users/escalade/events{/privacy}","received_events_url":"https://api.github.com/users/escalade/received_events","type":"User","site_admin":false},"created_at":"2016-05-03T22:53:11Z","updated_at":"2016-05-03T22:53:11Z","body":"A symlink to the old location would save the Go devs from supporting yet another variation and save users of Go related addons headache after upgrading."}}