diff --git a/.changes/updater-remove-ssl-cert-env.md b/.changes/updater-remove-ssl-cert-env.md new file mode 100644 index 000000000..263f3fbde --- /dev/null +++ b/.changes/updater-remove-ssl-cert-env.md @@ -0,0 +1,6 @@ +--- +"updater": patch:bug +"updater-js": patch:bug +--- + +On Linux, `check()` no longer sets `SSL_CERT_FILE` and `SSL_CERT_DIR` to Debian paths. The override pointed rustls to files that do not exist on distros with a different layout, such as ALT Linux, and left every TLS client in the app without root certificates. diff --git a/plugins/updater/src/updater.rs b/plugins/updater/src/updater.rs index d04a19cdb..809cd0065 100644 --- a/plugins/updater/src/updater.rs +++ b/plugins/updater/src/updater.rs @@ -539,16 +539,6 @@ impl Updater { headers.insert(ACCEPT, HeaderValue::from_static("application/json")); } - // Set SSL certs for linux if they aren't available. - #[cfg(target_os = "linux")] - { - if std::env::var_os("SSL_CERT_FILE").is_none() { - std::env::set_var("SSL_CERT_FILE", "/etc/ssl/certs/ca-certificates.crt"); - } - if std::env::var_os("SSL_CERT_DIR").is_none() { - std::env::set_var("SSL_CERT_DIR", "/etc/ssl/certs"); - } - } let target = if let Some(target) = &self.target { target } else {