The following environment variables may be specified at runtime to configure the behavior of TensorStore.
TLS CA certificates¶
On MS Windows and Mac OS, libcurl uses TLS facilities provided by the operating system and no additional configuration is necessary.
On Linux and BSD, if TensorStore is built with a bundled version of libcurl, as is the default, it expects to find the system certificate authority (CA) bundle in PEM format at
/etc/ssl/certs/ca-certificates.crt, which is the location used by most Linux distributions. If the system CA bundle is available at that path, no additional configuration is necessary.
If the system CA bundle is not available at that path, you can specify an alternative certificate bundle path or certificate directory at runtime with the
TENSORSTORE_CA_PATH environment variables:
Specifies the path to a local file containing one or more CA certificates concatenated into a single file in PEM format. On many Linux distributions, the system certificate bundle is available at
/etc/ssl/certs/ca-certificates.crt. Refer to the libcurl documentation for more details.
Specifies the path of a local directory containing one or more CA certificates in PEM format. Each file in the directory must contain a single certificate, and the directory must be prepared using the OpenSSL c_rehash command. Refer to the libcurl documentation for more details. Note that this is not the most common format for the system CA certificate store. In most cases, the system CA certificate store should instead be specified using
On Linux and BSD, TensoprStore may optionally be built to dynamically link to a system-provided version of libcurl by specifying
TENSORSTORE_SYSTEM_LIBS=se_curl. In this case, the default CA bundle path of
/etc/ssl/certs/ca-certificates.crt does not apply; instead, the default depends on how the system-provided libcurl was built, and most likely no additional configuration will be necessary.
Specifies a proxy server to use for making any HTTP or HTTPS request. Refer to the libcurl documentation for more details.
Specifies a comma-separated list of hostnames or ip addresses for which proxying is disabled. Refer to the libcurl documentation for more details.
If set to any value, verbose debugging information will be printed to stderr for all HTTP requests.
Specifies the path to a local file where information necessary to decrypt TensorStore’s TLS traffic will be saved in a format compatible with Wireshark. Refer to the libcurl documentation for more details.