Re #5, we've tested with the fixed code and getting the GPG fingerprint worked fine for us.
Not familiar with the python-pycurl code, I've one little question. The verified_https.py code seemed aimed at adding hostname validation, something HTTPSConnection didn't do. Assuming that was done on purpose, I guess the replacement code should do the same. Does pycurl do the validation? If yes, then I think the fix is OK. If no, then it might need a bit more work.
Now that getting the GPG fingerprint works it time to make GPG proxy aware, see #733023 ;-)
Re #5, we've tested with the fixed code and getting the GPG fingerprint worked fine for us.
Not familiar with the python-pycurl code, I've one little question. The verified_https.py code seemed aimed at adding hostname validation, something HTTPSConnection didn't do. Assuming that was done on purpose, I guess the replacement code should do the same. Does pycurl do the validation? If yes, then I think the fix is OK. If no, then it might need a bit more work.
Now that getting the GPG fingerprint works it time to make GPG proxy aware, see #733023 ;-)