hiro/poetry2nix
1
0
Fork 0
mirror of https://github.com/vale981/poetry2nix synced 2025-03-05 09:11:39 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #329 from nlewo/fix-insecure

Browse source 
Fix insecure ssl in fetch_from_legacy
This commit is contained in:
adisbladis 2021-07-01 10:20:45 -05:00 • committed by GitHub
commit fe0227e2ed
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
fetch_from_legacy.py
View file

@ -44,9 +44,13 @@ package_filename = sys.argv[3]
print("Reading index %s" % index_url) print("Reading index %s" % index_url)
context = ssl.create_default_context()
context.check_hostname = False
context.verify_mode = ssl.CERT_NONE
response = urllib.request.urlopen( response = urllib.request.urlopen(
index_url, index_url,
context=ssl.CERT_NONE) context=context)
index = response.read() index = response.read()
parser = Pep503() parser = Pep503()
@ -66,7 +70,7 @@ print("Downloading %s" % package_url)
response = urllib.request.urlopen( response = urllib.request.urlopen(
package_url, package_url,
context=ssl.CERT_NONE) context=context)
with response as r: with response as r:
shutil.copyfileobj(r, package_file) shutil.copyfileobj(r, package_file)