Bug 230904

Summary:

GlobalSign R3/R5 Root CA not present in cacert.pem resulting in module installation failure

Product:

WebKit

Reporter:

eddy_wong

Component:

Tools / Tests

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

jbedard, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

Other

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Adds GlobalSign R3/R5 Root CA	none
Adds GlobalSign R3/R5 Root CA with ChangeLog	none

Description eddy_wong 2021-09-28 11:31:33 PDT

Created attachment 439500 [details]
Adds GlobalSign R3/R5 Root CA

e.g. https://files.pythonhosted.org/packages/fc/0a/b486efab52f8ad03c3eca0c998dd3deafba0c39b29e0c49c68a7152c8b2d/setuptools-56.2.0.tar.gz

This uses GlobalSign R3 Root CA. We do not have it in `Tools/Scripts/libraries/webkitcorepy/webkitcorepy/cacert.pem`, resulting in installation failure:

```
% webkit-patch check-style-local                                      
Downloading setuptools-56.2.0...
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)>
Failed to download setuptools, retrying
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)>
Failed to download setuptools, retrying
Failed to install setuptools-56.2.0!
```

Comment 1 Jonathan Bedard 2021-09-28 11:40:23 PDT

Comment on attachment 439500 [details]
Adds GlobalSign R3/R5 Root CA

Need to have the changelog in the patch

Comment 2 eddy_wong 2021-09-28 11:49:54 PDT

Created attachment 439502 [details]
Adds GlobalSign R3/R5 Root CA with ChangeLog

Comment 3 EWS 2021-09-28 13:04:20 PDT

Committed r283190 (242237@main): <https://commits.webkit.org/242237@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 439502 [details].

Comment 4 Radar WebKit Bug Importer 2021-09-28 13:05:17 PDT

<rdar://problem/83636415>