mirror of
https://github.com/coder/coder.git
synced 2026-09-24 15:04:27 +08:00
Spike Curtis
132fa87bf3
Partially reverts #25136 for non-darwin platforms. In general we want to avoid pinning trust roots to embedded Certs, since that limits operational flexibility. If Azure changes CAs, operators should, at most, be able to update the OS trust store to keep Coder working correctly. Embedding roots means we need to upgrade the Coder binary. Since Coder Server on macOS is not really supported for production use, embedding only in that case to ease development and testing is OK.
11 lines
212 B
Go
11 lines
212 B
Go
//go:build !darwin
|
|
|
|
package azureidentity
|
|
|
|
import "crypto/x509"
|
|
|
|
// rootCertPool returns the system cert pool on non-Apple platforms.
|
|
func rootCertPool() (*x509.CertPool, error) {
|
|
return x509.SystemCertPool()
|
|
}
|