unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / code / Atom feed
* bug#49114: ‘guix lint’ should catch certificate validation exceptions
@ 2021-06-19 11:29 Tobias Geerinckx-Rice via Bug reports for GNU Guix
  2021-06-23 20:50 ` Ludovic Courtès
  0 siblings, 1 reply; 4+ messages in thread
From: Tobias Geerinckx-Rice via Bug reports for GNU Guix @ 2021-06-19 11:29 UTC (permalink / raw)
  To: 49114

[-- Attachment #1: Type: text/plain, Size: 373 bytes --]

Guix,

The linter should obviously warn about TLS errors but it should 
not terminate processing.  See ‘guix lint ibndp’ or ‘guix lint 
ttping’, where the hostname and certificate CN/SAN don't match.

In any other situation Guix is probably right to throw a scary 
error and abort, even if hashes are our primary defence, not TLS.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* bug#49114: ‘guix lint’ should catch certificate validation exceptions
  2021-06-19 11:29 bug#49114: ‘guix lint’ should catch certificate validation exceptions Tobias Geerinckx-Rice via Bug reports for GNU Guix
@ 2021-06-23 20:50 ` Ludovic Courtès
  2021-06-23 23:14   ` Tobias Geerinckx-Rice via Bug reports for GNU Guix
  0 siblings, 1 reply; 4+ messages in thread
From: Ludovic Courtès @ 2021-06-23 20:50 UTC (permalink / raw)
  To: 49114, Tobias Geerinckx-Rice

Hi,

Tobias Geerinckx-Rice via Bug reports for GNU Guix <bug-guix@gnu.org>
skribis:

> The linter should obviously warn about TLS errors but it should not
> terminate processing.  See ‘guix lint ibndp’ or ‘guix lint ttping’,
> where the hostname and certificate CN/SAN don't match.

I don’t see these two packages in my checkout.  Do you have other
examples?

Ludo’.




^ permalink raw reply	[flat|nested] 4+ messages in thread

* bug#49114: ‘guix lint’ should catch certificate validation exceptions
  2021-06-23 20:50 ` Ludovic Courtès
@ 2021-06-23 23:14   ` Tobias Geerinckx-Rice via Bug reports for GNU Guix
  2021-06-24 21:44     ` Ludovic Courtès
  0 siblings, 1 reply; 4+ messages in thread
From: Tobias Geerinckx-Rice via Bug reports for GNU Guix @ 2021-06-23 23:14 UTC (permalink / raw)
  To: Ludovic Courtès; +Cc: 49114

[-- Attachment #1: Type: text/plain, Size: 289 bytes --]

Ludovic Courtès 写道:
> I don’t see these two packages in my checkout.  Do you have 
> other
> examples?

Oh-kaay, I wonder what the devil went wrong there?  I wish I still 
had the original copy, but I don't.

I wrote libndp and httping, of course :-D

Thanks!

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* bug#49114: ‘guix lint’ should catch certificate validation exceptions
  2021-06-23 23:14   ` Tobias Geerinckx-Rice via Bug reports for GNU Guix
@ 2021-06-24 21:44     ` Ludovic Courtès
  0 siblings, 0 replies; 4+ messages in thread
From: Ludovic Courtès @ 2021-06-24 21:44 UTC (permalink / raw)
  To: Tobias Geerinckx-Rice; +Cc: 49114-done

Hi!

Tobias Geerinckx-Rice <me@tobias.gr> skribis:

> Ludovic Courtès 写道:
>> I don’t see these two packages in my checkout.  Do you have other
>> examples?
>
> Oh-kaay, I wonder what the devil went wrong there?  I wish I still had
> the original copy, but I don't.
>
> I wrote libndp and httping, of course :-D

Oh!  Fixed in 8a81ae61c183085b3a1edc4572d721ac5b2a581c.

Thanks,
Ludo’.




^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2021-06-24 21:45 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-06-19 11:29 bug#49114: ‘guix lint’ should catch certificate validation exceptions Tobias Geerinckx-Rice via Bug reports for GNU Guix
2021-06-23 20:50 ` Ludovic Courtès
2021-06-23 23:14   ` Tobias Geerinckx-Rice via Bug reports for GNU Guix
2021-06-24 21:44     ` Ludovic Courtès

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).