07th-mod / 07th-mod/python-patcher

SSL/TLS Errors Index Page

オープン 初心者向け
#214 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る
主要言語
JavaScript
スター
214
フォーク
12
PR マージ指標
30日以内にマージされた PR はありません

説明

This page indexes all the SSL/TLS problems we've had, and also records the recent SSL/TLS problem we've had.

### Recent SSL/TLS issue

Recently, two MacOS 10 users had an SSL error where, even though we had implemented the CURL fallback, even CURL was using certificates which wouldn't download from our 07th-mod site.

To fix this, I sent one user a version of the installer which uses a bundled certificate, if all else fails (as suggsted in https://github.com/07th-mod/python-patcher/issues/80).

### Further Explanation

Previously, we only used CURL (set the CURL executable) if it could download from the 07th-mod website.

Now, we set the CURL executable as long as it is available (even if it cannot download).

Then, we try to figure out which CURL certificate we should use, by trying each one:
- Use whatever the default is (no argument passed to CURL)
- Use any certificates found on the system (currently we only find certs on Linux though)
- Use the bundled certificate

The installer will try both the 07th-mod and github websites, and if a cert works with both then it chooses that one for the rest of the install.

The bundled certificate is retrieved from the CURL website https://curl.se/docs/caextract.html . It will be updated each time the installer is rebuilt. We would need to re-build the installer periodically as the certs would eventually expire, though, but I guess this is a last resort anyway.

### Known Issues

- Testing the certifcate requires/uses only CURL
- Currently Python's URLOpen does not use the chosen certificate. But wherever it is used in the installer, we have a CURL fallback.
- Also, while this certificate is also passed into Aria2, I noticed that on my Windows machine it doesn't like the certificate format. But on the MacOS logs, it appears to use the certificate.

### List of previous TLS/SSL issues

- https://github.com/07th-mod/python-patcher/issues/190
- https://github.com/07th-mod/python-patcher/issues/189
- https://github.com/07th-mod/python-patcher/issues/80
- https://github.com/07th-mod/python-patcher/pull/78
- https://github.com/07th-mod/python-patcher/issues/77
- https://github.com/07th-mod/python-patcher/issues/60

コントリビューションガイド

このリポジトリのコントリビューションガイドは索引されていません

調査の方向性

これは SSL/TLS 問題のインデックスページです。履歴を理解するには、リンクされた issue (190, 189, 80, 78, 77, 60) を読んでください。インストーラーコードは証明書のフォールバックロジックを処理します。curl の使用と証明書のバンドルを探してください。タスクは、このページを要約として維持し、新しい問題が発生したら追加することです。

索引モデルが issue の本文から書いたものです。

評価

技術スタック
python, shell
領域
cli, security
issue の種類
ドキュメント
難易度
1/5
見積もり時間
1時間未満
活発さ
停滞
明瞭さ
明確に書かれている
初心者へのやさしさ
75/100

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。