Golang httpClient CA证书的默认位置？

Question

I have a go program that connects to an internal API using the httpClient (it's all generated by swagger-codegen).

The internal API is using https and internal certificates with our internal CA.

On my Windows laptop, it works fine without specifying any CA.

On a Linux server, it fails with a x509: certificate signed by unknown authority error.

I believe our Windows corporate laptops have CA installed by default, and that golang is able to get those CA without any config.

Hence i would like to know where is go checking for CAs on both Linux and Windows, so i could compare the setup between both OSes and install the correct CA on Linux.

Answer 1

For Windows: https://golang.org/src/crypto/x509/root_windows.go

For Linux: https://golang.org/src/crypto/x509/root_linux.go

Found via this SO answer.