Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-3346

curl allows --insecure SSL connections

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: PUP 3.6.1, PUP 3.7.1
    • Fix Version/s: PUP 4.0.0
    • Component/s: Types and Providers
    • Labels:
      None
    • Template:

      Description

      The appdmg and pkgdmg providers were calling curl with -k (alias for --insecure) which allows curl'ing over insecure HTTPS connections. I can't see why this would ever be desired, and many connections will often fail when attempting establish a connection.

      I have a PR removing the insecure option: https://github.com/puppetlabs/puppet/pull/3124

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                seanknox Sean Knox
                QA Contact:
                Eric Thompson
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Zendesk Support