chore: download curl-ca-bundle.crt instead of roots.pem

Author: jinseopkim0

ci/kokoro/windows/builds/bazel.ps1

@@ -83,20 +83,23 @@ function Invoke-gRPC-Quickstart {
 
 if (Test-Integration-Enabled) {
     Write-Host "`n$(Get-Date -Format o) Running minimal quickstart prorams"
-    
+
     # Install certificates and set up environment variables for BoringSSL
     Install-Roots-Pem
-    
-    # BoringSSL prefers forward slashes for paths, even on Windows
-    $RawRootsPath = Join-Path $env:KOKORO_GFILE_DIR "roots.pem"
-    $RootsPath = $RawRootsPath -replace '\\', '/'
-    $KeyPath = (Join-Path $env:KOKORO_GFILE_DIR "kokoro-run-key.json") -replace '\\', '/'
 
+    # 2. MAGIC STEP: Add directory to PATH so libcurl finds the .crt file automatically
+    $env:PATH = "${env:KOKORO_GFILE_DIR};" + $env:PATH
+
+    # 3. Point gRPC to the same file. It handles .crt extensions perfectly fine.
+    $RootsPath = (Join-Path $env:KOKORO_GFILE_DIR "curl-ca-bundle.crt") -replace '\\', '/'
     $env:GRPC_DEFAULT_SSL_ROOTS_FILE_PATH = $RootsPath
-    $env:CURL_CA_BUNDLE = $RootsPath
-    $env:SSL_CERT_FILE = $RootsPath
+    $KeyPath = (Join-Path $env:KOKORO_GFILE_DIR "kokoro-run-key.json") -replace '\\', '/'
     $env:GOOGLE_APPLICATION_CREDENTIALS = $KeyPath
 
+    # 4. (Optional) Clear CURL_CA_BUNDLE to prove the "Magic PATH" works
+    # If the test passes now, it means libcurl found the file in %PATH%
+    $env:CURL_CA_BUNDLE = ""
+
     Invoke-REST-Quickstart
     Invoke-gRPC-Quickstart
 }

ci/kokoro/windows/lib/integration.ps1

@@ -26,20 +26,25 @@ function Test-Integration-Enabled {
     return $False
 }
 
+# ci/kokoro/windows/lib/integration.ps1
+
 function Install-Roots-Pem {
+    $DestPath = "${env:KOKORO_GFILE_DIR}/curl-ca-bundle.crt"
+
     Write-Host -ForegroundColor Yellow "`n$(Get-Date -Format o) " `
-        "Downloading roots.pem [$_]"
+        "Downloading curl-ca-bundle.crt [$_]"
+
     ForEach($attempt in (1, 2, 3)) {
         try {
             (New-Object System.Net.WebClient).Downloadfile(
                     'https://pki.google.com/roots.pem',
-                    "${env:KOKORO_GFILE_DIR}/roots.pem")
+                    $DestPath)
             return
         } catch {
             Write-Host -ForegroundColor Yellow "`n$(Get-Date -Format o) download error"
         }
         Start-Sleep -Seconds (60 * $attempt)
     }
-    Write-Host -ForegroundColor Red "cannot download roots.pem file."
+    Write-Host -ForegroundColor Red "cannot download curl-ca-bundle.crt file."
     Exit 1
 }