I am currently blocked by the knowns and unknowns here: https://github.com/osquery/osquery/issues/5769 related to packaging. One issue that has no solution yet, which we should discuss, is how to include a

certs.pem

. We had been doing this, since we provide a statically linked OpenSSL. One solution is to commit a version into

./tools

, then with some simple CPack logic we can maintain this expectation.