<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [WinCairo][MiniBrowser] Add ca-bundle to display secure pages"
href="https://bugs.webkit.org/show_bug.cgi?id=168486#c7">Comment # 7</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [WinCairo][MiniBrowser] Add ca-bundle to display secure pages"
href="https://bugs.webkit.org/show_bug.cgi?id=168486">bug 168486</a>
from <span class="vcard"><a class="email" href="mailto:Basuke.Suzuki@am.sony.com" title="Basuke Suzuki <Basuke.Suzuki@am.sony.com>"> <span class="fn">Basuke Suzuki</span></a>
</span></b>
<pre>(In reply to <a href="show_bug.cgi?id=168486#c6">comment #6</a>)
<span class="quote">> Patch
>
> View in context:
> <a href="https://bugs.webkit.org/attachment.cgi?id=302689&action=review">https://bugs.webkit.org/attachment.cgi?id=302689&action=review</a>
>
> > Source/WebCore/platform/network/curl/ResourceHandleManager.cpp:102
> > + char* envPath = getenv("CURL_CA_BUNDLE_PATH");
>
> Preferring this if it exists seems ok.
> </span >
<span class="quote">> I'm not sure it's a good idea to download this file every time you build.
> It could slow things down, it would require network access while building or
> fail, it would ping the curl server every time a developer runs cmake and
> developers might worry that they are being tracked,</span >
That's right. Actually that is exactly annoying thing by update-webkit-dependency do for me. I agree to avoid this kind of download on build process.
<span class="quote">> CMake's
> file(DOWNLOAD ...) seems to ignore ssl errors, so it's unclear how secure it
> really is.</span >
OMG, this must be the biggest reason to deny this patch.
<span class="quote">> It would be nice to print out instructions for how to get the
> cacert.pem, but I don't think this is a good idea to commit to the
> repository as-is.</span >
My idea is not downloading it separately, but include it inside WinCairoRequirements, because that library must maintain regularly. But at this moment, it seems not easy to make change to WinCairoRequirements.
Until then, I just want to remove the download patch.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>