snapcraft: use system certificates by default for https requests
Metadata
Current evaluation
Merged. Sets snapcraft to use system SSL certificates by default for HTTPS requests via REQUESTS_CA_BUNDLE, targeting Debian/Ubuntu paths while allowing override. Approved, passed CI, and modified one file.
Suggested action: —
No scores available.
Issue body
The `requests` library relies on `certifi` library for CA
certificates, unless the use overrides REQUESTS_CA_BUNDLE
environment variable to point to a different certificate
bundle.
Since there is no way for the user to tell certifi to use
the host certificates, unless using the OS distribution
patched package), have snapcraft always set
REQUESTS_CA_BUNDLE to the host SSL certificates, if they
exist in the usual Debian/Ubuntu location.
Log the setting to debug.
Note that this approach does allow the user to override
this default setting of REQUESTS_CA_BUNDLE with their own.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged. Sets snapcraft to use system SSL certificates by default for HTTPS requests via REQUESTS_CA_BUNDLE, targeting Debian/Ubuntu paths while allowing override. Approved, passed CI, and modified one file. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged. Sets snapcraft to use system SSL certificates for HTTPS requests via REQUESTS_CA_BUNDLE. Targets Debian/Ubuntu paths, logs the setting for debugging, and allows user override. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged to configure snapcraft to use system CA certificates by default via REQUESTS_CA_BUNDLE, overriding certifi while allowing user overrides and adding debug logging. |
Update history
No update history recorded yet.
Related issues
No related issues found above the similarity threshold.