mirror of
https://github.com/openSUSE/osc.git
synced 2024-11-10 14:56:14 +01:00
c62c9f54a0
Currently osc can't access API URLs which share the same IP address with other SSL-enabled sites, complaining about certificate not matching hostname. This change solves this problem by instructing M2Crypto.SSL.Connection to send the desired hostname to https server using TLS SNI extension, thus allowing the server to present the right certificate and choose the right virtual site. This is useful for those who can't afford to have a separate IP address for OBS API. For TLS SNI to work correctly, M2Crypto should be patched: https://bugzilla.osafoundation.org/show_bug.cgi?id=13073 Some distributions (like Fedora) already include this patch. For unpatched M2Crypto osc degrades to operation without TLS SNI. Signed-off-by: Oleg Girko <ol@infoserver.lv> |
||
|---|---|---|
| .. | ||
| util | ||
| __init__.py | ||
| .gitignore | ||
| babysitter.py | ||
| build.py | ||
| checker.py | ||
| cmdln.py | ||
| commandline.py | ||
| conf.py | ||
| core.py | ||
| fetch.py | ||
| meter.py | ||
| OscConfigParser.py | ||
| oscerr.py | ||
| oscssl.py | ||
| oscsslexcp.py | ||