From 4dca001b5d46e774c36af33b7e89531c7e9557a0 Mon Sep 17 00:00:00 2001 From: mvdbeek Date: Fri, 11 Feb 2022 17:23:08 +0100 Subject: [PATCH] Do verify certs You'll be running into problems later on anyway, and it doesn't look like there are builds with known shasums anymore for more recent virtualenv zipapps. --- scripts/common_startup.sh | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/scripts/common_startup.sh b/scripts/common_startup.sh index 892b6ddaed2..46ecd6ef2ff 100755 --- a/scripts/common_startup.sh +++ b/scripts/common_startup.sh @@ -146,14 +146,11 @@ if [ $SET_VENV -eq 1 ] && [ $CREATE_VENV -eq 1 ]; then vurl="https://bootstrap.pypa.io/virtualenv/${min_python_version}/virtualenv.pyz" vtmp=$(mktemp -d -t galaxy-virtualenv-XXXXXX) vsrc="$vtmp/$(basename $vurl)" - # SSL certificates are not checked to prevent problems with messed - # up client cert environments. We verify the download using a known - # good sha256 sum instead. echo "Fetching $vurl" if command -v curl >/dev/null; then - curl --insecure -L -o "$vsrc" "$vurl" + curl -L -o "$vsrc" "$vurl" elif command -v wget >/dev/null; then - wget --no-check-certificate -O "$vsrc" "$vurl" + wget -O "$vsrc" "$vurl" else "$GALAXY_PYTHON" -c "try: from urllib import urlretrieve