I'm having a strange issue when running a flutter app in a nix-shell
(with an FHS environment).
Specifically, the app throws a CERTIFICATE_VERIFY_FAILED: unable to get local issuer certificate(handshake.cc:393)
.
(Some history in this post, which was never really solved.)
The https
address I am contacting is LetsEncrypt signed, and works for all other clients, also e.g. with curl
executed in the same nix-shell
. (So this other issue doesn't provide valid solutions for the issue, because the case is different.)
So the question: where does the default flutter
https
-connection instance look for the system's ca-bundle.crt
if apparently not under /etc/ssl/certs/ca-bundle.crt
.
It also apparently doesn't use the SSL_CERT_FILE
, at least setting it to a valid bundle location doesn't have any effect.
(Obviously one could put some explicit cert-loading functionality in the flutter
app e.g. like suggested here, but that should be beside the point, since sensible system defaults should work out of the box.)