cvedb: Create aiohttp ClientSession with trust_env=True (#923)

We previously left this out. Without trust_env=True aiohttp won't pick
up proxy environment variables.

Fixes: #922

Signed-off-by: John Andersen <[email protected]>

Author: John Andersen

cve_bin_tool/cvedb.py

@@ -190,7 +190,7 @@ async def refresh(self):
             self.LOGGER.info("Checking if there is a newer version.")
             check_latest_version()
         if not self.session:
-            self.session = aiohttp.ClientSession()
+            self.session = aiohttp.ClientSession(trust_env=True)
         self.LOGGER.info("Downloading CVE data...")
         nvd_metadata, curl_metadata = await asyncio.gather(
             self.nist_scrape(self.session), self.get_curl_versions(self.session)

test/test_cvedb.py

@@ -22,7 +22,7 @@ def teardown_class(cls):
 
     @pytest.mark.asyncio
     async def test_00_getmeta(self):
-        async with aiohttp.ClientSession() as session:
+        async with aiohttp.ClientSession(trust_env=True) as session:
             _jsonurl, meta = await self.cvedb.getmeta(
                 session,
                 "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta",
@@ -31,7 +31,7 @@ async def test_00_getmeta(self):
 
     @pytest.mark.asyncio
     async def test_01_nist_scrape(self):
-        async with aiohttp.ClientSession() as session:
+        async with aiohttp.ClientSession(trust_env=True) as session:
             jsonshas = await self.cvedb.nist_scrape(session)
             assert (
                 "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2015.json.gz"
@@ -40,7 +40,7 @@ async def test_01_nist_scrape(self):
 
     @pytest.mark.asyncio
     async def test_02_cache_update(self):
-        async with aiohttp.ClientSession() as session:
+        async with aiohttp.ClientSession(trust_env=True) as session:
             jsonurl, meta = await self.cvedb.getmeta(
                 session, "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2015.meta"
             )