[ET Trac] [Einstein Toolkit] #1812: GetComponents needs to come with (a selected few) trusted certificates
Einstein Toolkit
trac-noreply at einsteintoolkit.org
Tue Sep 1 10:53:17 CDT 2015
#1812: GetComponents needs to come with (a selected few) trusted certificates
----------------------------+-----------------------------------------------
Reporter: knarf | Owner:
Type: enhancement | Status: new
Priority: minor | Milestone:
Component: GetComponents | Version: development version
Resolution: | Keywords:
----------------------------+-----------------------------------------------
Comment (by knarf):
Using the environment variable is an interesting idea, but it assumes we
can set it for all the future sessions of the user. Otherwise we would be
back to square one for a subsequent 'svn update'. Subversion also lets you
specify this without environment variable in it's user (or system) wide
config files, but I didn't really want GetComponents mess with that. I
would rather have the user deal with accepting the certificate if she
updates later by hand.
Getting a cert from an old enough root CA might be difficult/impossible.
First, the old certs might be insecure (SHA-1), or you simply have to way
to specify the chain yourself, or even change the certificate itself, like
on a public hosting system.
--
Ticket URL: <https://trac.einsteintoolkit.org/ticket/1812#comment:3>
Einstein Toolkit <http://einsteintoolkit.org>
The Einstein Toolkit
More information about the Trac
mailing list