CERBERUS/kitty
1
0
Fork 0
mirror of https://github.com/kovidgoyal/kitty.git synced 2026-05-13 08:26:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

macOS: Bundle mozilla's root certificates with kitty

Browse source 
Apple doesnt provide root certificates in a form useable by openssl
which means all ssl based network requests fail, so bundle our own

Fixes #3936
This commit is contained in:
Kovid Goyal 2021-08-16 17:16:03 +05:30
parent 827b6598b2
commit 56cb628ee8
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
3 changed files with 37 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

26
__main__.py
View file

@ -123,17 +123,29 @@ def setup_openssl_environment() -> None:
# out of their asses and implement a common location for SSL certificates.
# It's not that hard people, there exists a wonderful tool called the symlink
# See https://www.mobileread.com/forums/showthread.php?t=256095
if 'SSL_CERT_FILE' not in os.environ and 'SSL_CERT_DIR' not in os.environ:
if os.access('/etc/pki/tls/certs/ca-bundle.crt', os.R_OK):
os.environ['SSL_CERT_FILE'] = '/etc/pki/tls/certs/ca-bundle.crt'
#
# Also load bundled certs on macOS since Apple tries to make everyone use
# their NIH SSL library instead of OpenSSL.
if 'SSL_CERT_FILE' in os.environ or 'SSL_CERT_DIR' in os.environ:
return
candidates = ['/etc/pki/tls/certs/ca-bundle.crt']
ext_dir = getattr(sys, 'kitty_extensions_dir', '')
if ext_dir:
if 'darwin' in sys.platform.lower():
d = os.path.dirname
candidates.append(os.path.join(d(d(d(ext_dir))), 'cacert.pem'))
for q in candidates:
if os.access(q, os.R_OK):
os.environ['SSL_CERT_FILE'] = q
setattr(sys, 'kitty_ssl_env_var', 'SSL_CERT_FILE')
elif os.path.isdir('/etc/ssl/certs'):
os.environ['SSL_CERT_DIR'] = '/etc/ssl/certs'
setattr(sys, 'kitty_ssl_env_var', 'SSL_CERT_DIR')
return
if os.path.isdir('/etc/ssl/certs'):
os.environ['SSL_CERT_DIR'] = '/etc/ssl/certs'
setattr(sys, 'kitty_ssl_env_var', 'SSL_CERT_DIR')
def main() -> None:
if getattr(sys, 'frozen', False) and 'darwin' not in sys.platform.lower():
if getattr(sys, 'frozen', False):
setup_openssl_environment()
first_arg = '' if len(sys.argv) < 2 else sys.argv[1]
func = entry_points.get(first_arg)