Skip to content

[3.7] Make sure certs files are used as files on Windows - #2064

Merged
peterzhuamazon merged 1 commit into
opensearch-project:3.7from
peterzhuamazon:add-spec-retries
Jun 9, 2026
Merged

[3.7] Make sure certs files are used as files on Windows#2064
peterzhuamazon merged 1 commit into
opensearch-project:3.7from
peterzhuamazon:add-spec-retries

Conversation

@peterzhuamazon

@peterzhuamazon peterzhuamazon commented Jun 8, 2026

Copy link
Copy Markdown
Member

Description

[3.7] Make sure certs files are used as files on Windows

mingw curl and libssl curl are very different in handling certs

$ curl --version
curl 8.10.1 (x86_64-w64-mingw32) libcurl/8.10.1 Schannel zlib/1.3.1 brotli/1.1.0 zstd/1.5.6 libidn2/2.3
.7 libpsl/0.21.5 libssh2/1.11.0
Release-Date: 2024-09-18
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s
 rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli HSTS HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM PSL SPNEGO SS
L SSPI threadsafe UnixSockets zstd

ContainerAdministrator@48b77a15887b MINGW64 ~/scoop/shims
$ ./curl.exe --version
curl 8.15.0 (x86_64-w64-mingw32) libcurl/8.15.0 LibreSSL/4.1.0 zlib/1.3.1.zlib-ng brotli/1.1.0 zstd/1.5
.7 WinIDN libpsl/0.21.5 libssh2/1.11.1 nghttp2/1.66.0 ngtcp2/1.14.0 nghttp3/1.11.0
Release-Date: 2025-07-16
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s
 rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli CAcert HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz
 NTLM PSL SPNEGO SSL SSLS-EXPORT SSPI threadsafe UnixSockets zstd
curl: (58) schannel: Failed to import cert file

Schannel (Windows native TLS): Uses the Windows certificate store and only accepts PKCS#12 (.pfx/.p12) files for client certificates. PEM files are not supported because Windows' crypto APIs don't parse that format.

LibreSSL/OpenSSL (cross-platform TLS): Reads PEM files directly — this is the standard format for certificates and private keys on Linux/macOS and what most tools (including OpenSearch security plugin) generate by default.

Issues Resolved

https://ci.opensearch.org/ci/dbc/integ-test-opensearch-dashboards/3.7.0/8924/windows/x64/zip/test-results/8615/integ-test/assistantDashboards/with-security/stdout.txt

Check List

  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@yujin-emma yujin-emma left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@peterzhuamazon
peterzhuamazon marked this pull request as ready for review June 9, 2026 00:53
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
@peterzhuamazon
peterzhuamazon merged commit cc8fa02 into opensearch-project:3.7 Jun 9, 2026
58 checks passed
@peterzhuamazon
peterzhuamazon deleted the add-spec-retries branch June 9, 2026 00:56
@github-project-automation github-project-automation Bot moved this from 👀 In Review to ✅ Done in Engineering Effectiveness Board Jun 9, 2026
peterzhuamazon added a commit that referenced this pull request Jun 9, 2026
* Skip flaky searchOnPageLoad test in discover.spec.js (#2058)

Signed-off-by: Justin Kim <jungkm@amazon.com>

* Fix filter_editor combo box assertion for Cypress 13 (#2062)

Signed-off-by: Justin Kim <jungkm@amazon.com>

* [3.7] Update windows and linux to have different llm js startup/stop scripts (#2063)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>

* Make sure libssl curl is used to handle pem (#2064)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>

---------

Signed-off-by: Justin Kim <jungkm@amazon.com>
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Co-authored-by: Justin Kim <jungkm@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request release v3.7.0 Issues targeting release v3.7.0

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

3 participants