https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=230414

Kubilay Kocak <ko...@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ko...@freebsd.org,
                   |                            |pyt...@freebsd.org,
                   |                            |ser...@akhmatov.ru
           See Also|                            |https://bugs.freebsd.org/bu
                   |                            |gzilla/show_bug.cgi?id=1603
                   |                            |87
             Status|New                         |Open
           Keywords|patch                       |feature, needs-qa
              Flags|maintainer-feedback?(python |maintainer-feedback?(sergey
                   |@FreeBSD.org)               |@akhmatov.ru)

--- Comment #1 from Kubilay Kocak <ko...@freebsd.org> ---
While the functional changes itself appear OK (except for hardcoding
/usr/local), given the certifi project describes itself "Certifi is a carefully
curated collection of Root Certificates", and further appears to lean against
the addition of addition certs [1], I'm hesitant to modify the default provided
certificate bundle, for POLA and matching documentation reasons, both related
to user experience.

Yes, in this case the patch includes it only as an OPTION, but I think this
feature may ultimately be better served as an upstream issue/pull request,
similar to this request for extracting OSX trust roots [2]. There is an
additional benefit here of having FreeBSD support added to an upstream project,
presumably also in the documentation as such.

[1] https://github.com/certifi/python-certifi/issues/72
[2] https://github.com/certifi/python-certifi/issues/25

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
freebsd-python@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-python
To unsubscribe, send any mail to "freebsd-python-unsubscr...@freebsd.org"

Reply via email to