[gimp-macos-build/wip/lukaso/tests] circleci: update SSL certificates used by Python code.
- From: Jehan <jehanp src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [gimp-macos-build/wip/lukaso/tests] circleci: update SSL certificates used by Python code.
- Date: Sat, 9 Oct 2021 13:57:16 +0000 (UTC)
commit 8c0d1362e1e861116aa46b06a55afd0f898cc052
Author: Jehan <jehan girinstud io>
Date: Sat Oct 9 15:50:47 2021 +0200
circleci: update SSL certificates used by Python code.
Though certs seem to be well recognized in curl commands, they are not
in meson-fallback downloads, such as when download pcre 8.37 from
https://ftp.pcre.org (the file is present, I verified, and I could also
download it on the remote build machine with curl, after connecting
through SSH). The error was:
> Looking for a fallback subproject for the dependency libpcre because:
> Use of fallback dependencies is forced.
> Downloading libpcre source from https://ftp.pcre.org/pub/pcre/pcre-8.37.tar.bz2
> <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer
certificate (_ssl.c:1129)>
> A fallback URL could be specified using source_fallback_url key in the wrap file
> could not get https://ftp.pcre.org/pub/pcre/pcre-8.37.tar.bz2 is the internet available?
> Subproject libpcre is buildable: NO (disabling)
> Dependency libpcre from subproject libpcre found: NO (subproject failed to configure)
This is probably linked to the recent fiasco for Let's Encrypt root
certificates not updated on time on various systems (this web server
does use Let's Encrypt after verifying).
After some web search, I found this command to update the certs used by
Python. It seemed to work fine when re-running the configuration through
SSH.
.circleci/config.yml | 4 ++++
1 file changed, 4 insertions(+)
---
diff --git a/.circleci/config.yml b/.circleci/config.yml
index cffcd4b..f28bd65 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -18,6 +18,10 @@ jobs:
cd ~/
curl -L 'https://www.python.org/ftp/python/3.9.7/python-3.9.7-macos11.pkg' >
python-3.9.7-macosx11.pkg
sudo installer -pkg python-3.9.7-macosx11.pkg -target /
+ # Certificates are outdated, most likely after the recent
+ # Let's Encrypt root certs fiasco. This fixes it by
+ # updating the certs.
+ open /Applications/Python\ 3.9/Install\ Certificates.command
- run:
name: Setup 10.12 SDK
command: |
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]