ssl cert verification needs better defaults for all supported platforms
Bug #920455 reported by
Vincent Ladeuil
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Bazaar |
Fix Released
|
High
|
Vincent Ladeuil | ||
Bazaar Mac Installers |
Confirmed
|
High
|
Unassigned | ||
Bazaar Windows Installers |
Confirmed
|
High
|
Unassigned |
Bug Description
While the "/etc/ssl/
A quick google search gives:
freebsd: /usr/local/
fedora/rh: /etc/pki/
opensuse/sle: /etc/ssl/
osx: the certificates are stored in the system key chain, not sure how to proceed there, either we find a way to access them directly or we should provide a script or a recipe to extract/update them.
windows: IIRC we already provide some bundle for pycurl that we can reuse
We probably want to fix this before 2.5.0 is out so marking high (critical seems too much).
Related branches
lp:~vila/bzr/920455-ssl-defaults
- Martin Packman (community): Approve
- Gordon Tyler: Pending requested
- Jelmer Vernooij: Pending requested
-
Diff: 242 lines (+67/-47) (has conflicts)4 files modifiedbzrlib/errors.py (+2/-1)
bzrlib/tests/test_https_urllib.py (+8/-17)
bzrlib/transport/http/_urllib2_wrappers.py (+50/-29)
doc/en/release-notes/bzr-2.5.txt (+7/-0)
Changed in bzr: | |
milestone: | none → 2.5b6 |
status: | Confirmed → Fix Released |
To post a comment you must log in.
Adding bzr-windows- installer to keep track of which path is needed/used/tested.