#1812: GetComponents needs to come with (a selected few) trusted certificates ----------------------------+----------------------------------------------- Reporter: knarf | Owner: Type: enhancement | Status: new Priority: minor | Milestone: Component: GetComponents | Version: development version Resolution: | Keywords: ----------------------------+-----------------------------------------------
Comment (by knarf):
Using the environment variable is an interesting idea, but it assumes we can set it for all the future sessions of the user. Otherwise we would be back to square one for a subsequent 'svn update'. Subversion also lets you specify this without environment variable in it's user (or system) wide config files, but I didn't really want GetComponents mess with that. I would rather have the user deal with accepting the certificate if she updates later by hand.
Getting a cert from an old enough root CA might be difficult/impossible. First, the old certs might be insecure (SHA-1), or you simply have to way to specify the chain yourself, or even change the certificate itself, like on a public hosting system.