1
0
mirror of https://github.com/openSUSE/osc.git synced 2025-08-31 10:24:13 +02:00

auto detect ca certificates on Fedora (bnc#551756)

This commit is contained in:
Ludwig Nussel
2009-11-02 16:28:43 +00:00
parent c0760b0938
commit 31c5c2c11d

View File

@@ -360,7 +360,13 @@ def init_basicauth(config):
if 'cafile' in config['api_host_options'][config['apiurl']]:
cafile = config['api_host_options'][config['apiurl']]['cafile']
if not cafile and not capath:
capath = '/etc/ssl/certs'
for i in ['/etc/pki/tls/cert.pem', '/etc/ssl/certs' ]:
if os.path.isfile(i):
cafile = i
break
elif os.path.isdir(i):
capath = i
break
ctx = SSL.Context('sslv3')
ctx.set_verify(SSL.verify_peer | SSL.verify_fail_if_no_peer_cert, depth=9, callback=verify_cb)
if ctx.load_verify_locations(capath=capath, cafile=cafile) != 1: raise Exception('No CA certificates found')