Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: network use native system stores #444

Merged
merged 5 commits into from
Mar 1, 2024

Conversation

Guts
Copy link
Collaborator

@Guts Guts commented Feb 28, 2024

By default, a bundle of SSL certificates is used, through certifi. This PR allows QDT to use the system certificates store.

In this PR:

  • add truststore as dependency to use new Python APIs (3.10) to deal with native system certs stores
  • add a new QDT_SSL_USE_SYSTEM_STORES environment variable to enable this feature as an opt-in
  • add related documentation

Related documentation: https://guts.github.io/qgis-deployment-cli/guides/howto_behind_proxy.html#id1

cc @DeCiZoR and @Niarolf

@Guts Guts requested a review from Ducarouge February 28, 2024 15:39
@github-actions github-actions bot added documentation Improvements or additions to documentation enhancement New feature or request dependencies Project dependencies. labels Feb 28, 2024
@codecov-commenter
Copy link

codecov-commenter commented Feb 28, 2024

Codecov Report

Attention: Patch coverage is 31.25000% with 11 lines in your changes are missing coverage. Please review.

Project coverage is 71.11%. Comparing base (c21341d) to head (0c55846).
Report is 2 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #444      +/-   ##
==========================================
- Coverage   71.36%   71.11%   -0.26%     
==========================================
  Files          45       45              
  Lines        2630     2645      +15     
  Branches      565      569       +4     
==========================================
+ Hits         1877     1881       +4     
- Misses        574      583       +9     
- Partials      179      181       +2     
Flag Coverage Δ
unittests 70.58% <31.25%> (-0.26%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files Coverage Δ
qgis_deployment_toolbelt/utils/file_downloader.py 75.00% <50.00%> (-3.95%) ⬇️
qgis_deployment_toolbelt/utils/journalizer.py 66.66% <20.00%> (-7.58%) ⬇️

@Guts Guts self-assigned this Feb 28, 2024
@Guts Guts force-pushed the feature/network-use-native-system-stores branch from bef8bfa to 13920b6 Compare February 28, 2024 17:22
docs/usage/settings.md Show resolved Hide resolved
qgis_deployment_toolbelt/utils/journalizer.py Outdated Show resolved Hide resolved
@Guts Guts requested a review from Ducarouge March 1, 2024 15:18
Copy link

@Ducarouge Ducarouge left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As far as i understand this changes, LGTM !

@Guts Guts force-pushed the feature/network-use-native-system-stores branch from 0c55846 to bfdbdb8 Compare March 1, 2024 15:47
Copy link

sonarcloud bot commented Mar 1, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@Guts Guts merged commit f7ea8c7 into main Mar 1, 2024
28 checks passed
@Guts Guts deleted the feature/network-use-native-system-stores branch March 1, 2024 16:03
Guts added a commit that referenced this pull request Sep 4, 2024
…ough injection (#549)

This PR follows up:

- #544
- #444

It improve how system's store certificates are used, preferring a custom
HTTP adapter to the SSL injection.

It's mainly inspired from https://stackoverflow.com/a/78265028/2556577.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Project dependencies. documentation Improvements or additions to documentation enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants