[ET Trac] [Einstein Toolkit] #68: GetComponents non interactive in case of certificate issues.

[Einstein Toolkit]

#68: GetComponents non interactive in case of certificate issues.
---------------------------------+------------------------------------------
  Reporter:  diener@…            |       Owner:  eric9              
      Type:  defect              |      Status:  review             
  Priority:  minor               |   Milestone:                     
 Component:  GetComponents       |     Version:  development version
Resolution:                      |    Keywords:  newuser            
---------------------------------+------------------------------------------

Comment (by rhaas):

 Same state as before. Basically even with verbose set to true
 GetComponents does not display any prompts from svn about untrusted
 certificates and thus seems to hang (svn waits for user input).

 The proposed patch (updated to a pull request:
 https://github.com/gridaphobe/CRL/pull/7), uses Perl's IPC code to show
 stderr and stdout on screen and also captures it in the log file.

 The issue with paralell output obscuring svn's question to approved the
 certificate remains. Not much one can do about this other than trying to
 touch each svn (or git https for that matter) server once serially to get
 all questions being asked in serial mode. This happens to be what
 GetComponents does for svn right now (the svn info calls).

 Note all perl modules used by this are part of the core perl modules so
 are present on all perl installations. Since the original patch worked on
 QueenBee1 which would be far be the oldest software stack we would care
 about by now, it should also work on all machines around today.

 By now the patch likely only affects what is in the log since the
 accumulated workarounds seem to by now (almost) let the user interactively
 accept the cert. The thing blocking this right now is a {{{--non-
 interactive}}} option passed to the {{{svn info}}} calls at the beginning
 of the checkout loop.

 As a matter of fact if we want something that is a one line change to make
 the system behave somewhat sane (but not capture output in the log files
 if --verbose is used) then only (the equivalent) of commit
 1106763b91d924142ed5be164aa4a9c45ede7bbd is needed (though using bare
 backticks is still a bad idea).

-- 
Ticket URL: <https://trac.einsteintoolkit.org/ticket/68#comment:29>
Einstein Toolkit <http://einsteintoolkit.org>
The Einstein Toolkit