[webkit-reviews] review requested: [Bug 230904] GlobalSign R3/R5 Root CA not present in cacert.pem resulting in module installation failure : [Attachment 439500] Adds GlobalSign R3/R5 Root CA

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Sep 28 11:31:33 PDT 2021


eddy_wong at apple.com has asked  for review:
Bug 230904: GlobalSign R3/R5 Root CA not present in cacert.pem resulting in
module installation failure
https://bugs.webkit.org/show_bug.cgi?id=230904

Attachment 439500: Adds GlobalSign R3/R5 Root CA

https://bugs.webkit.org/attachment.cgi?id=439500&action=review




--- Description ---
e.g.
https://files.pythonhosted.org/packages/fc/0a/b486efab52f8ad03c3eca0c998dd3deaf
ba0c39b29e0c49c68a7152c8b2d/setuptools-56.2.0.tar.gz

This uses GlobalSign R3 Root CA. We do not have it in
`Tools/Scripts/libraries/webkitcorepy/webkitcorepy/cacert.pem`, resulting in
installation failure:

```
% webkit-patch check-style-local				      
Downloading setuptools-56.2.0...
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed:
unable to get local issuer certificate (_ssl.c:1123)>
Failed to download setuptools, retrying
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed:
unable to get local issuer certificate (_ssl.c:1123)>
Failed to download setuptools, retrying
Failed to install setuptools-56.2.0!
```


More information about the webkit-reviews mailing list