Skip to content

Research Version - 0.2.1

Latest
Latest

Choose a tag to compare

View all tags
@zumatt zumatt released this 10 Jun 13:27
0.2.1
2fc7d73

Release Notes - TLS Certificate Setup Improvements (macOS)

Summary

This release improves Setup Robot reliability on macOS systems where the PRC certificate is not already trusted.

What Changed

  • Added automatic PRC root CA installation attempt during setup when the certificate is missing from the user login keychain.
  • Added fallback trust loading from the bundled PRC root certificate.
  • Added DER-to-PEM conversion for bundled certificate assets so gRPC can use them correctly as trust roots.
  • Improved status diagnostics for certificate installation success or failure.
  • Added better setup failure visibility via traceback/status reporting.

Why

Some users could start the embedded server but still fail setup with TLS handshake errors:

  • CERTIFICATE_VERIFY_FAILED
  • unable to get local issuer certificate

These changes reduce manual troubleshooting and improve first-run experience on fresh macOS machines.

User Impact

  • On most macOS systems, setup now self-recovers by installing or using the bundled root CA.
  • If auto-install cannot run due to permissions, users get a clear status message and can run the install command manually.

Manual Fallback (if needed)

Run from the Certificates folder:

security add-trusted-cert -r trustRoot -k ~/Library/Keychains/login.keychain-db ./PRCRootCertificate.crt

Then restart Blender and run Setup Robot again.

Notes

  • Existing users with a correctly trusted PRC CA are unaffected.
  • This release focuses on trust chain and setup diagnostics only.
Assets 3
Loading