[PATCH 0/2] Fix ca-certs to work with Python 3

Richard Ipsum richard.ipsum at codethink.co.uk
Tue Nov 3 18:26:56 GMT 2015

repo: git://git.baserock.org/delta/ca-certificates
ref: baserock/richardipsum/debian/20140325
sha: 193eb2042c6be1775f4c41f6297fe5c1521828e0
land: baserock/debian/20140325


As mentioned in #baserock, our ca-cert installation has been broken
since we moved python3 into core, because the ca-cert installation depends
on python2. This means that Baserock users cannot currently, for example,
clone a git repo over https.

This series takes the original attempt[1], by upstream, to move the ca-cert
installation towards python3 and fixes it up a bit.

The result should function with both python2 and python3.
I have done quite a bit of reading into unicode handling in python2
and python3 and have verified that the certificate filenames produced
by the python2 version match the certificate filenames produced by the python3
version, which both in turn match the certificate filenames produced
without this patch. I have built a devel system using this patch
and the resulting system can clone over https.

If everything looks okay to folks here then I'll submit this upstream also,
but I'd prefer that we merge this branch into the land mentioned above so
that upstream doesn't block Baserock users (myself included! :) ).

Hope this helps,
Richard Ipsum

[1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789753

Michael Shuler (1):
  Add Python 3 support to ca-certificates.

Richard Ipsum (1):
  Fix unicode conversions

 debian/changelog        | 109 ++++++++++++++++++++++++++++++++++++++++++++++++
 mozilla/certdata2pem.py |  57 ++++++++++++++++++-------
 2 files changed, 150 insertions(+), 16 deletions(-)


More information about the baserock-dev mailing list