Bugs for Sorcery are reported here

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=14739

           Summary: no-check-certificate hint applied too liberally
           Product: Sorcery
           Version: 1.14.x
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Summon
        AssignedTo: sm-sorcery-bugs AT lists.ibiblio.org
        ReportedBy: acedit AT armory.com


The no-check-certificate SOURCE_HINT enables the --no-check-certificate 
command
line option to wget. wget only supports the flag if compiled with openssl. The
wget spell lists openssl as an optional dependency, therefore ssl-less wget is
a valid configuration.

While summoning elfutils, i observed the flag is enabled for both http and
https whether or not the local wget supports it. As such, if local wget does
not support the flag, summon will fail to download the source not only from 
the
primary url, but also from the fallbacks (which do not require
--no-check-certificate).

If the hint implied the flag is to be enabled for https urls only, OR enabled
ONLY if the local wget supports it, then summon of elfutils would succeed
through a fallback site.


-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.