Skip to content

Commit 82ad27e

Browse files
pks-tgitster
authored andcommitted
gitlab-ci: drop workaround for Python certificate store on Windows
On Windows, we have been running into some issues in the past where the certificate store for Python is broken on the GitLab CI runners using Windows. The consequence was that we weren't able to establish any SSL connections via Python, but we need that feature so that we can download the Meson wraps. The workaround we employed was to import certificates from the cURL project into the certificate store via OpenSSL. This is obviously an ugly workaround. But even more importantly, this workaround fails every time Chocolatey updates its OpenSSL packages. The problem here is that the old OpenSSL package installer will be removed immediately once the newer version was published, But the Chocolatey community repository may not yet have propagated the new version of this package to all of its caches. The result is that for a couple hours (or sometimes even one or two days) we always fail to install OpenSSL until the new version was propagated. Luckily though, it turns out that the workaround doesn't seem to be required anymore. Drop it to work around the intermittent failures and to clean up some now-unneeded legacy cruft. Signed-off-by: Patrick Steinhardt <[email protected]> Signed-off-by: Junio C Hamano <[email protected]>
1 parent e90f6b2 commit 82ad27e

File tree

1 file changed

+1
-9
lines changed

1 file changed

+1
-9
lines changed

.gitlab-ci.yml

Lines changed: 1 addition & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -157,17 +157,9 @@ test:mingw64:
157157
- saas-windows-medium-amd64
158158
before_script:
159159
- *windows_before_script
160-
- choco install -y git meson ninja openssl
160+
- choco install -y git meson ninja
161161
- Import-Module $env:ChocolateyInstall\helpers\chocolateyProfile.psm1
162162
- refreshenv
163-
# The certificate store for Python on Windows is broken and fails to fetch
164-
# certificates, see https://bugs.python.org/issue36011. This seems to
165-
# mostly be an issue with how the GitLab image is set up as it is a
166-
# non-issue on GitHub Actions. Work around the issue by importing
167-
# cetrificates manually.
168-
- Invoke-WebRequest https://curl.haxx.se/ca/cacert.pem -OutFile cacert.pem
169-
- openssl pkcs12 -export -nokeys -in cacert.pem -out certs.pfx -passout "pass:"
170-
- Import-PfxCertificate -CertStoreLocation Cert:\LocalMachine\Root -FilePath certs.pfx
171163

172164
build:msvc-meson:
173165
extends: .msvc-meson

0 commit comments

Comments
 (0)