From 66d84c9914bd4bd5acaf82be5b4a87fe34b3a139 Mon Sep 17 00:00:00 2001 From: Nick Craig-Wood Date: Thu, 5 Nov 2015 18:07:37 +0000 Subject: [PATCH] Document where to install root certificates - fixes #196 --- docs/content/faq.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/docs/content/faq.md b/docs/content/faq.md index da8fca62e..7bccce4d8 100644 --- a/docs/content/faq.md +++ b/docs/content/faq.md @@ -115,3 +115,25 @@ in which case the "http" scheme is assumed. The `NO_PROXY` allows you to disable the proxy for specific hosts. Hosts must be comma separated, and can contain domains or parts. For instance "foo.com" also matches "bar.foo.com". + +### Rclone gives x509: failed to load system roots and no roots provided error ### + +This means that `rclone` can't file the SSL root certificates. Likely +you are running `rclone` on a NAS with a cut-down Linux OS. + +Rclone (via the Go runtime) tries to load the root certificates from +these places on Linux. + + "/etc/ssl/certs/ca-certificates.crt", // Debian/Ubuntu/Gentoo etc. + "/etc/pki/tls/certs/ca-bundle.crt", // Fedora/RHEL + "/etc/ssl/ca-bundle.pem", // OpenSUSE + "/etc/pki/tls/cacert.pem", // OpenELEC + +So doing something like this should fix the problem. It also sets the +time which is important for SSL to work properly. + +``` +mkdir -p /etc/ssl/certs/ +curl -o /etc/ssl/certs/ca-certificates.crt https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt +ntpclient -s -h pool.ntp.org +```