unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / code / Atom feed
* bug#49114: ‘guix lint’ should catch certificate validation exceptions
@ 2021-06-19 11:29 Tobias Geerinckx-Rice via Bug reports for GNU Guix
  2021-06-23 20:50 ` Ludovic Courtès
  0 siblings, 1 reply; 4+ messages in thread
From: Tobias Geerinckx-Rice via Bug reports for GNU Guix @ 2021-06-19 11:29 UTC (permalink / raw)
  To: 49114

[-- Attachment #1: Type: text/plain, Size: 373 bytes --]

Guix,

The linter should obviously warn about TLS errors but it should 
not terminate processing.  See ‘guix lint ibndp’ or ‘guix lint 
ttping’, where the hostname and certificate CN/SAN don't match.

In any other situation Guix is probably right to throw a scary 
error and abort, even if hashes are our primary defence, not TLS.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2021-06-24 21:45 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-06-19 11:29 bug#49114: ‘guix lint’ should catch certificate validation exceptions Tobias Geerinckx-Rice via Bug reports for GNU Guix
2021-06-23 20:50 ` Ludovic Courtès
2021-06-23 23:14   ` Tobias Geerinckx-Rice via Bug reports for GNU Guix
2021-06-24 21:44     ` Ludovic Courtès

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).