Where does Snap look for SSL certs?

There was an error when using the Plume Snap. The error takes place with an ActivityPub instance is connecting to search for a user on the Plume Snap instance.

Mastodon, for example returns:

503 Remove SSL certificate could not be verified

The SSL certs are properly listed in the Apache2 .vhost file on a Debian 9 VPS.

How can I get the Snap install of Plume to use the proper SSL certs? They are Let’s Encrypt certs. Clearly a symbolic link can’t be used with a Snap.

I looked through the Snap directory structure and came across the …/ssl directory which was empty:

writeworks:/snap/plume/148/etc/ssl/certs# ls -la
total 0
drwxr-xr-x 2 root root  3 Dec  2 14:54 .
drwxr-xr-x 4 root root 62 Feb 18 08:58 ..

You ever figure out where snaps look for certs? We are having an issue with snaps not working with ssl inspection.

I would run strace on the snap and pipe that to grep ssl. Then you have things like python that bring their own ca certificate bundle which complicates things even more.

Hi darkenstranger,

Would you please explain the issue you experience in more detail? Is this for snap you maintain or just use?