Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-3346

curl allows --insecure SSL connections

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: PUP 3.6.1, PUP 3.7.1
    • Fix Version/s: PUP 4.0.0
    • Component/s: Types and Providers
    • Labels:
      None
    • Template:

      Description

      The appdmg and pkgdmg providers were calling curl with -k (alias for --insecure) which allows curl'ing over insecure HTTPS connections. I can't see why this would ever be desired, and many connections will often fail when attempting establish a connection.

      I have a PR removing the insecure option: https://github.com/puppetlabs/puppet/pull/3124

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              seanknox Sean Knox
              QA Contact:
              Eric Thompson
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Zendesk Support