Merge pull request #96 from rstudio/glin/fix-opensuse42

Work around issue with expired root certificate on openSUSE 42
This commit is contained in:
Greg Lin 2021-10-22 18:29:41 -05:00 committed by GitHub
commit 0f33d6522e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -75,6 +75,15 @@ RUN gem install ffi:1.12.2 fpm:1.11.0 && \
RUN chmod 0777 /opt
# Work around issue with expired Let's Encrypt root certificate and OpenSSL 1.0.2,
# which affects downloads from sourceforge.net (and possibly other sites).
# On SLES 12, the issue can be resolved by updating ca-certificates-mozilla, but
# openSUSE 42 (EOL) requires a manual removal of the expired DST Root CA X3 cerificate.
# https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/
# https://www.suse.com/support/kb/doc/?id=000020401
RUN rm /usr/share/pki/trust/DST_Root_CA_X3.pem && \
update-ca-certificates
# Install an older xz 5.0.5 for compatibility with SLES 12
ARG XZ_VERSION=5.0.5
ARG XZ_DOWNLOAD_SHA1=26fec2c1e409f736e77a85e4ab314dc74987def0