From 65d45bcad8766b335f50979a285e36d3e00cdc21 Mon Sep 17 00:00:00 2001 From: Philipp Keck Date: Wed, 14 Dec 2016 17:55:07 +0100 Subject: [PATCH] Explain how to install trusted root certificates The slproweb.com OpenSSL distribution does not contain root certificates, so they need to be downloaded and installed manually to avoid certificate warnings when making requests. --- README.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/README.md b/README.md index 9c3e30a2f8..0f1eb43542 100644 --- a/README.md +++ b/README.md @@ -73,6 +73,18 @@ installation via an environment variable: set OPENSSL_DIR=C:\OpenSSL-Win64 ``` +Note that this OpenSSL distribution does not ship with any root certificates. +So to make requests to servers on the internet, you have to install them +manually. Download the [cacert.pem file from here], copy it somewhere safe +(`C:\OpenSSL-Win64\certs` is a good place) and point the `SSL_CERT_FILE` +environment variable there: + +``` +set SSL_CERT_FILE=C:\OpenSSL-Win64\certs\cacert.pem +``` + +[cacert.pem file from here]: https://curl.haxx.se/docs/caextract.html + After that, you're just a `cargo build` away! ### Windows GNU (MinGW)