Rig 0.7.0 does not work with Proxy and Internal CA Certs on MacOS

[chrisphe]

Whilst Rig 0.6.0 works perfectly on MacOS, with 0.7.0 I saw an error regarding certificate validation on MacOS:

[ERROR] Cannot download JSON: error sending request for url (https://api.r-hub.io/versions/available/macos/arm64): error trying to connect: invalid peer certificate: UnknownIssuer

I suspect that Rig is no longer making using of SSL_CERT_FILE.

[gaborcsardi]

This is probably because rig switched to rustls instead of openssl. I'll look into how to use the certs with rustls.

[chrisphe]

There's a couple of options - this PR seems to address this rustls/rustls-native-certs#32 Also https://github.com/rustls/rustls-native-certs

[chrisphe]

By way of update, I wanted to mention this issue is also occurring on Linux, so I would assume it exists on all platforms in 0.7.0.

[cxgillis]

Just adding another bump to this issue; my organization also requires use of Proxy and Internal CA Certs and so due to this issue we are no longer able to use Rig starting with version 0.7.0. Would be grateful to see this ability restored as it was before this latest release to allow us to stay up-to-date, and many thanks.

[rennerom]

I've been following this issue for a bit, but I'll also go ahead and add another bump. Running rig add in my organization fails with certificate errors on both Linux and Windows machines with rig version 0.7.0.

[InkaSpy]

For me it is the same. I am unfortunately not able to use rig now, also because I cannot access the previous version anywhere.

[gaborcsardi]

also because I cannot access the previous version anywhere.

All releases, including older ones, are at https://github.com/r-lib/rig/releases

[gaborcsardi]

Thanks for the pointers and sorry for the long wait! This should be fixed now in dev, and there'll be a release very soon.

If you can build rig locally on your machine, then you can also test it now.