Skip to content

Commit f124c26

Browse files
fix: set --openssldir=/etc/ssl so profiler finds system CA bundle (#18)
Without --openssldir, OpenSSL's compiled-in default cert search path is /usr/local/openssl/ssl (based on --prefix), which does not exist on user machines. SSL_CTX_set_default_verify_paths() finds no CAs and all HTTPS profile uploads fail with "SSL server verification failed". Same fix as grafana/pyroscope-dotnet@d5c4ca7 Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
1 parent c6be862 commit f124c26

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

docker/wheel-musllinux.Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ RUN curl -fsSL "https://github.com/openssl/openssl/releases/download/openssl-${O
1010
-o /tmp/openssl.tar.gz \
1111
&& tar xzf /tmp/openssl.tar.gz -C /tmp \
1212
&& cd /tmp/openssl-${OPENSSL_VERSION} \
13-
&& ./config no-shared no-tests --prefix=/usr/local/openssl \
13+
&& ./config no-shared no-tests --prefix=/usr/local/openssl --openssldir=/etc/ssl \
1414
&& make -j$(nproc) \
1515
&& make install_sw \
1616
&& ln -sf /usr/local/openssl/lib64 /usr/local/openssl/lib || true \

docker/wheel.Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ RUN curl -fsSL "https://github.com/openssl/openssl/releases/download/openssl-${O
1010
-o /tmp/openssl.tar.gz \
1111
&& tar xzf /tmp/openssl.tar.gz -C /tmp \
1212
&& cd /tmp/openssl-${OPENSSL_VERSION} \
13-
&& ./config no-shared no-tests --prefix=/usr/local/openssl \
13+
&& ./config no-shared no-tests --prefix=/usr/local/openssl --openssldir=/etc/ssl \
1414
&& make -j$(nproc) \
1515
&& make install_sw \
1616
&& ln -sf /usr/local/openssl/lib64 /usr/local/openssl/lib || true \

0 commit comments

Comments
 (0)