Skip to content

We should use the system root CA store instead of local cert file #165

@chotea

Description

@chotea

Just finished a meeting together with the customer. Andrea Perin was investigating a certificate issue when running our custom App. Everything works fine if they use a certificate signed by a public authority. Things are failing when the customer is using a self-signed certificate. All the salt components are working fine in any use case. Only the app that is using nisystemlink-clients-python is failing.

We had an Epic that said all the components from the client side should use the system root ca store instead of leveraging the one in C:\ProgramData\National Instruments\Skyline\Certificates\http-client . The Epic requirements document should have all the details about why we've changed the components.

Epic: https://ni.visualstudio.com/DevCentral/_workitems/edit/2826272
Feature: https://ni.visualstudio.com/DevCentral/_workitems/edit/2823011

Example of changes that we've done:
https://ni.visualstudio.com/DevCentral/_git/ni-central/pullrequest/775068?_a=files
https://ni.visualstudio.com/DevCentral/_git/ni-central/commit/84a1e110eb84d39196b0c84f043917244102f87a?refName=refs/heads/main&path=/src/systemlink/shared/niskylineFrameworkd/niskyline_messagebus_python/source/templates/asyncio/rest.mustache

So I think we should do the same here to save ourselves from hours of troubleshooting on customer deployments.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions