-
Notifications
You must be signed in to change notification settings - Fork 4.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
macOS: Can HttpClient do custom cert handling with libcurl+openssl10? #21679
Comments
cc @stephentoub |
@bartonjs can you please set milestone? Or does it need discussion first? |
Since this will enable a workaround on macOS where none currently exists, this seems pretty worthwhile for 2.0. Of course, it's entirely experimental, so it's possible that it can't be done at a shipping quality in the time remaining. |
Just wanted to 👍 this with the context that it would unblock PowerShell/PowerShell#3648 which would help a non-trivial amount of our customers and partners use PowerShell Core 6.0 on macOS. Feel free to ping me offline if you need more formal justification. |
@joeyaiello, just to be sure, https://github.com/dotnet/corefx/issues/19709 would also unblock PowerShell, right? It looks like SkipCertificateCheck just uses |
@stephentoub that sounds right to me, but I would need @daxian-dbw to confirm. Going to linkback to #21672 in that issue as well. Thanks! |
@bartonjs is the one you created workaround for? If not what else is left? Do you plan to finish it before vacation or should we give it to someone else? |
@karelz I haven't had a chance to start yet, honestly. If new problems would stop being discovered and distracting me, I'd probably be able to finish it. But it's looking iffy. |
Discussed in shiproom based on input from @stephentoub. Plan to work on for 2.1 and backport if it does turn out to be blocking. |
@stephentoub did you mean to close it? Or leave it open for 2.1? |
I think this was meant to track the 2.1 work ... reopening. @stephentoub please let me know if I misunderstood. |
Any news when we can expect a fix for this one? We're hitting this in really basic HTTP client code. |
I was given to understand that this would be rendered moot by the managed HTTP handler. So I guess I thought this issue was closed. Though apparently it's assigned to me, and open 😄. |
ManagedHandler will be just opt-in in 2.1. One day, it will be default. Given the number of upvotes (22), I wonder if there is something targeted we could/should do for 2.1 -- given that we were even considering backporting it into servicing of 2.0 (https://github.com/dotnet/corefx/issues/19718#issuecomment-303532816). |
We discussed it with @bartonjs couple of weeks ago. Anyone can give it a try with SocketsHttpHandler in 2.1 Preview1 - see blog post with details how to turn it on (heads up: the way how to turn it on will change in Preview2). |
Gedankenexperiment:
new X509Certificate2(byte[])
.The text was updated successfully, but these errors were encountered: