develooper Front page | perl.perl5.porters | Postings from June 2022

Re: Pre-RFC: support https out-of-the-box

Thread Previous | Thread Next
From:
Martijn Lievaart
Date:
June 16, 2022 21:39
Subject:
Re: Pre-RFC: support https out-of-the-box
Message ID:
72f00d56-710b-719d-d34c-2cddbdcdbc07@rtij.nl

Op 16-06-2022 om 16:58 schreef Darren Duncan:
> THIS IS A DUPLICATE RESPONSE.  I HAD PREVIOUSLY SENT THE SAME THING 
> UNDER AN ALTERED SUBJECT LINE.  REPEATED TO KEEP IT TOGETHER WITH THE 
> MAIN THREAD.
>
>
> I propose an alternate solution, summarized as bootstrapping.
>
> Perl bundles an implementation of HTTPS support including certs or 
> whatever, so there is zero dependency on any HTTPS library or files 
> being with the operating system.
>

Including certs is problematic, certs change over time. I assume we want 
a static tarball for any perl release, not one that changes over time. 
So I think this is not a feasable idea. You could include a long lived 
root cert and try to always use that on root cert, but I would not go 
that way. If you would like to use a different root cert later, you 
painted yourself in a corner.


HTH,

M4



Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About