GNU bug report logs - #40486
http-get doesn't respect #:verify-certificate?

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#40486: closed (http-get doesn't respect #:verify-certificate?)
Date: Wed, 27 May 2020 21:30:02 +0000

[Message part 1 (text/plain, inline)]

Your message dated Wed, 27 May 2020 23:29:49 +0200
with message-id <87zh9tgj76.fsf <at> gnu.org>
and subject line Re: bug#40486: http-get doesn't respect #:verify-certificate?
has caused the debbugs.gnu.org bug report #40486,
regarding http-get doesn't respect #:verify-certificate?
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
40486: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=40486
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Jan Synacek <jsynacek <at> redhat.com>
To: bug-guile <at> gnu.org
Subject: http-get doesn't respect #:verify-certificate?
Date: Tue, 07 Apr 2020 17:29:54 +0200

When I run the following piece of code:

(use-modules (web client))
(http-get "https://bugzilla.redhat.com/rest/bug/1" #:verify-certificate? #f)

I get:
...
In web/client.scm:
    563:0  1 (http-get "https://bugzilla.redhat.com/rest/bug/1" # _ # …)
    231:6  0 (tls-wrap #<closed: file 1db4540> _ # _)

web/client.scm:231:6: In procedure tls-wrap:
X.509 certificate of 'bugzilla.redhat.com' could not be verified:
  signer-not-found invalid

If I use http-request instead of http-get, the keyword argument is
correctly taken into account and the certificate is not verified.

I use v3.0.2.

[Message part 3 (message/rfc822, inline)]

From: Ludovic Courtès <ludo <at> gnu.org>
To: Jan Synacek <jsynacek <at> redhat.com>
Cc: 40486-done <at> debbugs.gnu.org
Subject: Re: bug#40486: http-get doesn't respect #:verify-certificate?
Date: Wed, 27 May 2020 23:29:49 +0200

Hi,

Jan Synacek <jsynacek <at> redhat.com> skribis:

> When I run the following piece of code:
>
> (use-modules (web client))
> (http-get "https://bugzilla.redhat.com/rest/bug/1" #:verify-certificate? #f)
>
> I get:
> ...
> In web/client.scm:
>     563:0  1 (http-get "https://bugzilla.redhat.com/rest/bug/1" # _ # …)
>     231:6  0 (tls-wrap #<closed: file 1db4540> _ # _)
>
> web/client.scm:231:6: In procedure tls-wrap:
> X.509 certificate of 'bugzilla.redhat.com' could not be verified:
>   signer-not-found invalid
>
> If I use http-request instead of http-get, the keyword argument is
> correctly taken into account and the certificate is not verified.
>
> I use v3.0.2.

Fixed in a5421d2bb6e27fe77e794f950833ca6d84c8c523, thanks!

Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.