Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#66393 - [python-ply] switch to https

Attached to Project: Arch Linux
Opened by T.J. Townsend (blakkheim) - Friday, 24 April 2020, 22:05 GMT
Last edited by Eli Schwartz (eschwartz) - Wednesday, 20 May 2020, 18:47 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Felix Yan (felixonmars)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
Patch switches source line to HTTPS.
   python-ply.diff (0.7 KiB)
This task depends upon

Closed by  Eli Schwartz (eschwartz)
Wednesday, 20 May 2020, 18:47 GMT
Reason for closing:  Not a bug
Comment by Eli Schwartz (eschwartz) - Wednesday, 20 May 2020, 18:47 GMT
$ curl -sS -O https://www.dabeaz.com/ply/ply-3.11.tar.gz
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.


https://www.ssllabs.com/ssltest/analyze.html?d=www.dabeaz.com

> This server's certificate chain is incomplete. Grade capped to B.

There is a reason this PKGBUILD was switched to use https in the url, in commit https://git.archlinux.org/svntogit/packages.git/commit/trunk/PKGBUILD?h=packages/python-ply&id=9fbd9ad1c179181af6321d1a11c1663212e9c2b6
But at the same time, extra hacks were added to make sure the source was NOT downloaded over https. Because the website is broken, even if a browser can often hack around it with sideloaded intermediate certs.

Loading...