Date: Sun, 27 Oct 2019 07:23:41 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 241516] Enable certificate verification for 'make makesum' Message-ID: <bug-241516-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D241516 Bug ID: 241516 Summary: Enable certificate verification for 'make makesum' Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: ports-bugs@FreeBSD.org Reporter: lantw44@gmail.com Created attachment 208625 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D208625&action= =3Dedit Patch Currently Mk/bsd.port.mk includes this section of code: .if !make(makesum) FETCH_ENV?=3D SSL_NO_VERIFY_PEER=3D1 SSL_NO_VERIFY_HOSTNAME=3D1 .endif When FETCH_ENV isn't defined, certificate verification is disabled when the target isn't makesum. However, it doesn't work as intended. 'make makesum' calls 'make fetch' internally, and 'make fetch' disables certificate verification because the target isn't makesum. Therefore, certificate verification is in fact always disabled unless the users define FETCH_ENV themselves. To fix the problem, define FETCH_ENV when makesum is used and export it for sub-make to find it. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-241516-7788>