# fix: trust the system's certificate authorities when checking for updates · clo/snowbound

[View on GitCafe](https://git.cafe/clo/snowbound/commit/bf28ad621ca5962e64fe4ab4c73a90d92204d181)

Repository: [clo/snowbound](https://git.cafe/clo/snowbound)

Visibility: public

Requested revision: bf28ad621ca5962e64fe4ab4c73a90d92204d181

Requested commit: bf28ad621ca5962e64fe4ab4c73a90d92204d181

Commit: bf28ad621ca5962e64fe4ab4c73a90d92204d181

Tree: 1066a8dbc2a65fe5e0fd26c02e7aab4cc7064783

Author: clover caruso

Committer: clover caruso

## Message

```
fix: trust the system's certificate authorities when checking for updates

The update check pinned Mozilla's bundled roots, so behind a TLS-intercepting proxy
whose root lives only in the system store it failed with "invalid peer certificate:
UnknownIssuer". Downloads now trust the system's roots (keychain trust settings,
the Windows root store, the distribution's CA bundle) plus the bundled ones, which
cover a store that is missing or stale. Signature checks of builds are unchanged.

Assisted-by: claude-opus-5.5

```

## Parents

- [01e73fd4cffeccb05dd939ca75bcfb583fb252e2](https://git.cafe/clo/snowbound/commit/01e73fd4cffeccb05dd939ca75bcfb583fb252e2?format=markdown)

[Source at this commit](https://git.cafe/clo/snowbound/tree/bf28ad621ca5962e64fe4ab4c73a90d92204d181?format=markdown)