File 0006-enforce-usage-of-cacert-discovered-by-python-certifi-by-default.patch of Package aws-cli-2
From b0c420d7b0ddf66e404bb4b53c63e224ff2ee68c Mon Sep 17 00:00:00 2001
From: Dominik Wombacher <dominik@wombacher.cc>
Date: Thu, 16 May 2024 11:33:32 +0000
Subject: [PATCH] fix: Enforce usage of cacert discovered by python certifi by
default
---
awscli/botocore/httpsession.py | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/awscli/botocore/httpsession.py b/awscli/botocore/httpsession.py
index 29b210377..ce2bbdaad 100644
--- a/awscli/botocore/httpsession.py
+++ b/awscli/botocore/httpsession.py
@@ -65,14 +65,16 @@ filter_ssl_warnings()
logger = logging.getLogger(__name__)
DEFAULT_TIMEOUT = 60
MAX_POOL_CONNECTIONS = 10
-DEFAULT_CA_BUNDLE = os.path.join(os.path.dirname(__file__), 'cacert.pem')
try:
from certifi import where
except ImportError:
def where():
- return DEFAULT_CA_BUNDLE
+ return os.path.join(os.path.dirname(__file__), 'cacert.pem')
+
+# Enforce usage of cacert discovered by python certifi by default
+DEFAULT_CA_BUNDLE = where()
def get_cert_path(verify):
--
2.35.3