On Sat, May 30, 2015 at 02:59:58PM -0400, James McCoy wrote: > Looks like this is related to <https://wiki.debian.org/ServicesSSL>. > The attached patch is working for me. Updated patch to a) use the ca-certificates.crt file and b) check if it exists first. Cheers, -- James GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <jamessan@debian.org>
From 9cb98151b9e7d675b9dc7d2aaf8debe95e48ac43 Mon Sep 17 00:00:00 2001
From: James McCoy <vega.james@gmail.com>
Date: Sat, 30 May 2015 14:54:25 -0400
Subject: [PATCH] watch/sf.wml: Use ca-global to validate SourceForge certs
Signed-off-by: James McCoy <vega.james@gmail.com>
---
wml/watch/sf.wml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/wml/watch/sf.wml b/wml/watch/sf.wml
index ebbf5a7..54a3b81 100644
--- a/wml/watch/sf.wml
+++ b/wml/watch/sf.wml
@@ -20,6 +20,12 @@ if (preg_match(',/.+,', $project)) {
$xml_url = "https://sourceforge.net/projects/$project/rss?limit=10000000000000000000";;
+$cafile = '/etc/ssl/ca-global/ca-certificates.crt';
+if (file_exists($cafile)) {
+ $context = stream_context_create(array('ssl' => array('capath' => '/etc/ssl/ca-global')));
+ libxml_set_streams_context($context);
+}
+
$xml = simplexml_load_file($xml_url, 'SimpleXMLElement', LIBXML_NOCDATA);
$title = $xml->channel[0]->title;
$files = $xml->channel[0]->item;
--
2.1.4
Attachment:
signature.asc
Description: Digital signature