chiark / gitweb /
makebuildserver: verify https all requests to avoid urllib3 warnings
authorMarcus Hoffmann <bubuiic@aol.com>
Wed, 16 Aug 2017 22:49:53 +0000 (00:49 +0200)
committerMarcus Hoffmann <bubuiic@aol.com>
Wed, 16 Aug 2017 22:49:53 +0000 (00:49 +0200)
According to http://docs.python-requests.org/en/master/user/advanced/#ca-certificates
python-requests >= 2.4.0 will use the certifi provided certificates.
We already recommend installing python3-certifi in the docs.
On debian requests is patched to use the system trust store instead.

makebuildserver

index df553fa2df61cdc40aa6065811624747709f5c87..797a80973a4781d72058f3a0827f3a7817377c73 100755 (executable)
@@ -391,7 +391,7 @@ def update_cache(cachedir, cachefiles):
 
         if download:
             r = requests.get(srcurl, headers=resume_header,
-                             stream=True, verify=False, allow_redirects=True)
+                             stream=True, allow_redirects=True)
             content_length = int(r.headers.get('content-length'))
             with open(local_filename, 'ab') as f:
                 for chunk in progress.bar(r.iter_content(chunk_size=65536),