Skip to content

Gracefully handle 'FUTURE' system-wide cryptographic policy on EL #3

Description

@scottsideleau

RHEL 8 introduces system-wide cryptographic policies.

When using 'FUTURE' mode, OpenSSL is prevented from accessing resources without a trusted entry in the CA store. Since 'curl' uses OpenSSL by default and python.org is not part of a default installation's CA store, the download attempts fail.

Initially, this can be fixed by just employing the --insecure flag offered by curl.

Provide a more graceful solution to the user.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions