Skip to Content.
Sympa Menu

sm-sorcery-bugs - [SM-Sorcery-Bugs] [Bug 14739] New: no-check-certificate hint applied too liberally

sm-sorcery-bugs AT lists.ibiblio.org

Subject: Bugs for Sorcery are reported here

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-sorcery-bugs AT lists.ibiblio.org
  • Subject: [SM-Sorcery-Bugs] [Bug 14739] New: no-check-certificate hint applied too liberally
  • Date: 18 Sep 2008 15:42:37 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=14739

Summary: no-check-certificate hint applied too liberally
Product: Sorcery
Version: 1.14.x
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P3
Component: Summon
AssignedTo: sm-sorcery-bugs AT lists.ibiblio.org
ReportedBy: acedit AT armory.com


The no-check-certificate SOURCE_HINT enables the --no-check-certificate
command
line option to wget. wget only supports the flag if compiled with openssl. The
wget spell lists openssl as an optional dependency, therefore ssl-less wget is
a valid configuration.

While summoning elfutils, i observed the flag is enabled for both http and
https whether or not the local wget supports it. As such, if local wget does
not support the flag, summon will fail to download the source not only from
the
primary url, but also from the fallbacks (which do not require
--no-check-certificate).

If the hint implied the flag is to be enabled for https urls only, OR enabled
ONLY if the local wget supports it, then summon of elfutils would succeed
through a fallback site.


--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.




Archive powered by MHonArc 2.6.24.

Top of Page