From 565b71526c262860b27be60435228d8d3ce69e9d Mon Sep 17 00:00:00 2001 From: Sacha Al Himdani Date: Tue, 21 Apr 2026 19:28:56 +0200 Subject: [PATCH] Pass ACME root CA to dev config generation The dev-config Make target was missing the ACME_ROOT_CA env var, causing probod to fail with an untrusted certificate error when connecting to the local Pebble ACME server. Signed-off-by: Sacha Al Himdani --- GNUmakefile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/GNUmakefile b/GNUmakefile index 1086e9da0..748d7580c 100644 --- a/GNUmakefile +++ b/GNUmakefile @@ -161,7 +161,7 @@ $(CFG_DEV_OAUTH2_KEY): @$(MKDIR) $(@D) $(OPENSSL) genrsa -out $@ 2048 -cfg/dev.yaml: bin/probod-bootstrap $(CFG_DEV_OAUTH2_KEY) $(wildcard $(DEV_ENV)) +cfg/dev.yaml: bin/probod-bootstrap $(CFG_DEV_OAUTH2_KEY) compose/pebble/certs/rootCA.pem $(wildcard $(DEV_ENV)) @$(MKDIR) $(@D) set -a; \ PROBOD_ENCRYPTION_KEY="thisisnotasecretAAAAAAAAAAAAAAAAAAAAAAAAAAA="; \ @@ -175,6 +175,7 @@ cfg/dev.yaml: bin/probod-bootstrap $(CFG_DEV_OAUTH2_KEY) $(wildcard $(DEV_ENV)) AWS_ENDPOINT=http://127.0.0.1:8333; \ OPENAI_API_KEY=thisisnotasecret; \ ACME_DIRECTORY=https://localhost:14000/dir; \ + ACME_ROOT_CA="$$($(CAT) compose/pebble/certs/rootCA.pem)"; \ if [ -f $(DEV_ENV) ]; then . $(DEV_ENV); fi; \ set +a; \ ./bin/probod-bootstrap -output $@