GNU bug report logs - #40486
http-get doesn't respect #:verify-certificate?

Previous Next

Full log

Message #10 received at 40486-done <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Jan Synacek <jsynacek <at> redhat.com>
Cc: 40486-done <at> debbugs.gnu.org
Subject: Re: bug#40486: http-get doesn't respect #:verify-certificate?
Date: Wed, 27 May 2020 23:29:49 +0200

Hi,

Jan Synacek <jsynacek <at> redhat.com> skribis:

> When I run the following piece of code:
>
> (use-modules (web client))
> (http-get "https://bugzilla.redhat.com/rest/bug/1" #:verify-certificate? #f)
>
> I get:
> ...
> In web/client.scm:
>     563:0  1 (http-get "https://bugzilla.redhat.com/rest/bug/1" # _ # …)
>     231:6  0 (tls-wrap #<closed: file 1db4540> _ # _)
>
> web/client.scm:231:6: In procedure tls-wrap:
> X.509 certificate of 'bugzilla.redhat.com' could not be verified:
>   signer-not-found invalid
>
> If I use http-request instead of http-get, the keyword argument is
> correctly taken into account and the certificate is not verified.
>
> I use v3.0.2.

Fixed in a5421d2bb6e27fe77e794f950833ca6d84c8c523, thanks!

Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.