Skip to content

Gracefully handle 'FUTURE' system-wide cryptographic policy on EL #3

@scottsideleau

Description

@scottsideleau

RHEL 8 introduces system-wide cryptographic policies.

When using 'FUTURE' mode, OpenSSL is prevented from accessing resources without a trusted entry in the CA store. Since 'curl' uses OpenSSL by default and python.org is not part of a default installation's CA store, the download attempts fail.

Initially, this can be fixed by just employing the --insecure flag offered by curl.

Provide a more graceful solution to the user.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions