Bug#749225: [uscan] does not work with bitbucket

Jakub Wilk jwilk at debian.org
Sun May 25 15:35:59 UTC 2014


* James McCoy <jamessan at debian.org>, 2014-05-25, 11:21:
>>No idea why the verification fails, though. Other TLS clients I tested 
>>seem to be happy with it.
>>
>>Unfortunately, there doesn't seem to be currently any way to disable 
>>certificate verification in uscan.
>
>“env PERL_LWP_SSL_VERIFY_HOSTNAME=0 uscan …” should work.

PERL_LWP_SSL_VERIFY_HOSTNAME=0 used to completely disable certificate 
verification, but now it only disables checking that the hostname 
matches the certificate's CN/subjectAltName. (This is side effect of 
fixing bug #746579.)

This new semantics is not very useful in general, but it's indeed 
sufficient for https:/bbuseruploads.s3.amazonaws.com/.

-- 
Jakub Wilk



More information about the devscripts-devel mailing list