martroben commented on issue #5696: URL: https://github.com/apache/arrow-rs/issues/5696#issuecomment-2082015422
@tustvold, thank you for the background information. Downloading the certificate and manually pointing the `SSL_CERT_FILE` env variable to it is something that we used [to solve](https://github.com/delta-io/delta-rs/issues/1803#issuecomment-1943617812) a similar problem in the same setup (polars in Fabric). It worked well until about a few weeks ago, but not anymore. In the [previous incarnation](https://github.com/delta-io/delta-rs/issues/1803) of the same problem, interacting with a delta table would fail with an error from openssl, complaining about the peer certificate being self-signed. Now the error is coming from webpki (or so I think), saying that the problem is using a CA cert as EE cert. So I suppose I named the question somewhat misleadingly. I'm not sure whether Microsoft started using a CA cert as EE on top of using self-signed certificates or if it was something else that changed - but as of now, object_store can't interact with OneLake delta tables from Fabric, even with a good CA file. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
