GNU bug report logs - #40486
http-get doesn't respect #:verify-certificate?

Previous Next

Full log

View this message in rfc822 format

From: Jan Synacek <jsynacek <at> redhat.com>
To: 40486 <at> debbugs.gnu.org
Subject: bug#40486: http-get doesn't respect #:verify-certificate?
Date: Tue, 07 Apr 2020 17:29:54 +0200

When I run the following piece of code:

(use-modules (web client))
(http-get "https://bugzilla.redhat.com/rest/bug/1" #:verify-certificate? #f)

I get:
...
In web/client.scm:
    563:0  1 (http-get "https://bugzilla.redhat.com/rest/bug/1" # _ # …)
    231:6  0 (tls-wrap #<closed: file 1db4540> _ # _)

web/client.scm:231:6: In procedure tls-wrap:
X.509 certificate of 'bugzilla.redhat.com' could not be verified:
  signer-not-found invalid

If I use http-request instead of http-get, the keyword argument is
correctly taken into account and the certificate is not verified.

I use v3.0.2.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.