Dummy file to be able to build on FreeBSD

[slegrand45]

Hi,

Without this dummy "truststore_freebsd.go" file, i get these errors if i try a build on FreeBSD 14.3 / Go 1.21.13:

./cert.go:143:16: ca.installPlatform undefined (type *CA has no field or method installPlatform)
./cert.go:156:105: undefined: NSSBrowsers
./cert.go:157:13: undefined: CertutilInstallHelp
./cert.go:158:89: undefined: NSSBrowsers
./cert.go:160:126: undefined: NSSBrowsers
./cert.go:161:81: undefined: CertutilInstallHelp
./cert.go:172:102: undefined: NSSBrowsers
./cert.go:174:13: undefined: CertutilInstallHelp
./cert.go:175:157: undefined: NSSBrowsers
./cert.go:176:89: undefined: CertutilInstallHelp
./cert.go:176:89: too many errors

After adding this file, the build is ok and i am able to build symfony-cli. So i can install API Platform as described here : Getting Started With API Platform with Symfony

I guess this is really a workaround but, at least, i'm now able to use symfony-cli on FreeBSD 🙂

[tucksaun]

thank you for initiating this.

FreeBSD and Linux support might be relatively close in term of support so we should be able to extract part of truststore_linux.go to truststore_posix.go and make truststore_posix built for linux and freebsd.
@fabpot WDYT?

[tucksaun]

It's been a while since I used FreeBSD (and never as a desktop) but I think it has NSS support (at least I find it in FreshPorts). In such case we should try to mimic linux support and update this with the appropriate NSS install command.

[slegrand45]

If it can help, the FreeBSD NSS port installs all these files: pkg-plist

[tucksaun]

installing a custom certificate on FreeBSD seems to be done /usr/local/etc/ssl/cert/ and then run certctl rehash

[slegrand45]

There is no /usr/local/etc/ssl/cert/ on a FreeBSD default installation. But if you install the ca_root_nss port, you get the following files:

/etc/ssl/cert.pem
/usr/local/etc/ssl/cert.pem.sample
/usr/local/openssl/cert.pem
/usr/local/share/certs/ca-root-nss.crt
/usr/local/share/licenses/ca_root_nss-3.108/LICENSE
/usr/local/share/licenses/ca_root_nss-3.108/MPL20
/usr/local/share/licenses/ca_root_nss-3.108/catalog.mk

[slegrand45]

Hi,

Thank you for your comments. FWIW:

• The utility certctl is included in the FreeBSD default installation: source

• On a FreeBSD default installation, with no ports installed (other than Go), the command symfony-cli server:ca:install succeeds:

You might have to enter your root password to install the local Certificate Authority certificate
The local CA is now installed in the system trust store!
Generating a default certificate for HTTPS support                
 [OK] The local Certificate Authority is installed and trusted

and it creates the following files in my home directory:

/home/stephane/.symfony5/certs/rootCA-key.pem
/home/stephane/.symfony5/certs/rootCA.pem
/home/stephane/.symfony5/certs/trusted
/home/stephane/.symfony5/certs/default.p12

If i can do other tests, feel free to ask. My mid-term goal, ideally, would be to add symfony-cli to the FreeBSD ports tree.

[tucksaun]

@slegrand45 thank you for the feedback. As NSS is not included by default I guess one could contribute its support on FreeBSD later on.