[Mono-dev] cert-sync

Edward Ned Harvey (mono) edward.harvey.mono at clevertrove.com
Thu Jan 22 12:34:18 UTC 2015


> From: Alexander Köplinger [mailto:alex.koeplinger at outlook.com]
> Sent: Thursday, January 22, 2015 7:16 AM
> 
> I just tested as well and was able to run a simple new
> WebClient().DownloadString("https://www.google.com");  without issues
> after a fresh install of the Mono MDK on OSX, so I'm not sure why it only
> works after running mozroots for you?

Interesting.  Have a look in these directories:
	~/.config/.mono/certs/Trust
	/usr/share/.mono/certs/Trust

If you have stuff there, it must have been populated by mozroots, or something.  I understand that the latest packages distributed by mono repositories have automated cert-sync in linux during package installation, but that's not yet present on OSX.  So on OSX, mozroots or something is necessary to populate the root Trust.

If you don't have those directories - or if they're empty - it will raise new questions about differences between WebClient().DownloadString() versus SslStream.AuthenticateAsClient().  I am using the latter, on mono 3.12 MRE for OSX.


More information about the Mono-devel-list mailing list