make_ssl_certs: run at build time, update reference test data automatically
Open
Nobody has claimed this yet.
type-bug
- Dominant language
- Python
- Stars
- 77.2k
- Forks
- 35.9k
- PR merge metrics
- PR metrics pending
Description
Bug report
Bug description:
As discussed here:
https://github.com/python/cpython/pull/107594
make_ssl_certs.py has a few shortcomings. In particular:
- it generates certificates, but does not update reference data in tests that use them, instead asking the user to copy paste the data by hand (expiration dates and serial numbers in particular)
- it is supposed to be run by hand and isn't executed in builds, which means its output has to be checked into git, cluttering the source tree, and complicating reviews of pull requests that change that output.
- expiration dates are hardcoded into the tool and can't be passed in as parameters
CPython versions tested on:
CPython main branch
Operating systems tested on:
Linux
Linked PRs
- gh-119401
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading make_ssl_certs.py and the linked PR gh-119401, then inspect the reference test data that uses its certificates. The work is complete when certificate generation runs during builds, updates the reference data automatically, and accepts expiration dates as parameters without requiring checked-in generated output.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- build-system, testing
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100