Ticket #29129 (new enhancement)
fetch.type svn: don't ignore SSL certificates unless port says to
| Reported by: | ryandesign@… | Owned by: | ryandesign@… |
|---|---|---|---|
| Priority: | Normal | Milestone: | MacPorts Future |
| Component: | base | Version: | 1.9.2 |
| Keywords: | Cc: | ||
| Port: |
Description
Since r54434, when using fetch.type svn, MacPorts checks out Subversion working copies using the --trust-server-cert option. MacPorts should only trust unknown SSL certificates if the port says fetch.ignore_sslcert yes.
Support for the --trust-server-cert option is also the only reason why MacPorts depends on the subversion port when the OS is less than Snow Leopard; this requirement could be removed if the port doesn't need to ignore the certificate.
Change History
comment:2 follow-up: ↓ 3 Changed 14 months ago by ryandesign@…
The svn bundled with Lion apparently has its own issues verifying ssl certificates (has somebody filed a RADAR bug?), which means we'd either have to continue ignoring certificates on Lion or require the subversion port on Lion.
comment:3 in reply to: ↑ 2 Changed 14 months ago by jmr@…
Replying to ryandesign@…:
(has somebody filed a RADAR bug?)
rdar://problem/11116033
Feel free to file a(nother) dupe.