← Back to issue list

snapcraft: use system certificates by default for https requests

View original Github issue

Metadata

Project
snapcraft
Number
#3252
Type
pull request
State
merged
Author
cjp256
Labels
Created
Updated
Closed

Current evaluation

Merged. Sets snapcraft to use system SSL certificates by default for HTTPS requests via REQUESTS_CA_BUNDLE, targeting Debian/Ubuntu paths while allowing override. Approved, passed CI, and modified one file.

Suggested action:

No scores available.

Issue body

The `requests` library relies on `certifi` library for CA certificates, unless the use overrides REQUESTS_CA_BUNDLE environment variable to point to a different certificate bundle. Since there is no way for the user to tell certifi to use the host certificates, unless using the OS distribution patched package), have snapcraft always set REQUESTS_CA_BUNDLE to the host SSL certificates, if they exist in the usual Debian/Ubuntu location. Log the setting to debug. Note that this approach does allow the user to override this default setting of REQUESTS_CA_BUNDLE with their own.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b Merged. Sets snapcraft to use system SSL certificates by default for HTTPS requests via REQUESTS_CA_BUNDLE, targeting Debian/Ubuntu paths while allowing override. Approved, passed CI, and modified one file.
qwen3.6-35b-a3b-mtp-q6 Merged. Sets snapcraft to use system SSL certificates for HTTPS requests via REQUESTS_CA_BUNDLE. Targets Debian/Ubuntu paths, logs the setting for debugging, and allows user override.
qwen3.6-35b-a3b-mtp-q6 Merged to configure snapcraft to use system CA certificates by default via REQUESTS_CA_BUNDLE, overriding certifi while allowing user overrides and adding debug logging.

Update history

No update history recorded yet.

Related issues

No related issues found above the similarity threshold.