mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-09-09 00:57:53 +00:00
f7dd6156d3
Implements the feature introduced in the design
document added with commit 4bdc1d37
Fixes https://redhat.atlassian.net/browse/RUN-4260
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
20 lines
625 B
Go
20 lines
625 B
Go
package certificates
|
|
|
|
import (
|
|
"crypto/x509"
|
|
|
|
"github.com/sirupsen/logrus"
|
|
)
|
|
|
|
// extractHostCertificates retrieved Linux trusted CA certificates from the OS
|
|
// trust stores.
|
|
func extractHostCertificates() []*x509.Certificate {
|
|
// On Linux, system CA certificates are typically stored in:
|
|
// - /etc/ssl/certs/ca-certificates.crt (Debian/Ubuntu)
|
|
// - /etc/pki/tls/certs/ca-bundle.crt (RHEL/Fedora/CentOS)
|
|
// - /etc/ssl/ca-bundle.pem (OpenSUSE)
|
|
// - /etc/pki/tls/cacert.pem (OpenELEC)
|
|
// - /etc/ssl/cert.pem (Alpine Linux)
|
|
logrus.Warn("extracting trusted CA certificates on Linux is not implemented yet")
|
|
return nil
|
|
}
|