Opened 8 years ago

Closed 8 years ago

#940 closed defect (fixed)

Use newer OpenSSL on Mac OS X

Reported by: Greg Couch Owned by: Conrad Huang
Priority: critical Milestone: 0.7
Component: Infrastructure Version:
Keywords: Cc:
Blocked By: Blocking:
Notify when closed: Platform: all
Project: ChimeraX

Description

On High Sierra, Apple's library that we use for OpenSSL with Python no longer works. Python does not have code that uses Apple's cryptographic API. The proposed solution is to compilr OpenSSL and periodically dump the root certificates maintained by Mac OS X into a file that OpenSSL can use.

Change History (4)

comment:1 by Greg Couch, 8 years ago

Summary: Use newer OpenSLL on Mac OS X → Use newer OpenSSL on Mac OS X

comment:2 by Eric Pettersen, 8 years ago

Milestone: Beta 2 → 0.6

Milestone renamed

comment:3 by Conrad Huang, 8 years ago

Milestone: 0.6 → 0.7

comment:4 by Conrad Huang, 8 years ago

Resolution: → fixed
Status: assigned → closed

Fixed by using OpenSSL and setting SSL_CERT_FILE environment variable to point at certificates in the "certifi" package, which is bundled as part of Sphinx install. Still need to either add an updatable tool to toolshed, or some code (probably near toolshed update check), to automatically update certifi (to get new certificates).

Note: See TracTickets for help on using tickets.