crypto/x509: CGO_ENABLED=0 x509: certificate signed by unknown authority

[kotyara85]

What version of Go are you using (go version)?

go version go1.12.14 darwin/amd64

Does this issue reproduce with the latest release?

yes

What operating system and processor architecture are you using (go env)?

darwin/amd64

What did you do?

We're using akamai zta, which means the path is our cli tool -> sso -> website

What did you expect to see?

Downloaded page

What did you see instead?

x509: certificate signed by unknown authority

This only works if CGO_ENABLED=1, but we need to build darwin & windows images inside linux docker image

[andybons]

Can you provide a small program that demonstrates this behavior?

[andybons]

@FiloSottile @katiehockman

[gopherbot]

Change https://golang.org/cl/227037 mentions this issue: crypto/x509: use Security.framework without cgo for roots on macOS

[kotyara85]

This fix didn't solve the problem on 1.14.3

[FiloSottile]

This fix will be released in Go 1.15, not a minor release.

[kotyara85]

Gotcha, thanks