diff options
| author | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2017-09-02 23:29:38 +0200 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2018-04-06 20:10:17 +0200 |
| commit | 4a1a806d486402323e7b3ce6c1b457183d71bb4a (patch) | |
| tree | 5bf5a28ecc0df8f89566d7bb8a67766c1a27b081 | |
| parent | 560b1d374e15046567ed7c866aa1aebbaf3d6e7e (diff) | |
| download | buildroot-4a1a806d486402323e7b3ce6c1b457183d71bb4a.tar.gz buildroot-4a1a806d486402323e7b3ce6c1b457183d71bb4a.zip | |
utils/genrandconfig: use --no-check-certificate in wget by default
A number of autobuilder failures are due to the fact that autobuilder
instances use old distributions, with old SSL certificates, and
therefore wget aborts with an error "The certificate of `xyz.org' is
not trusted.".
In order to avoid such failures that are not very interesting in the
context of the autobuilders, we pass --no-check-certificate to
wget. The integrity of the downloaded files is anyway verified by the
hashes, and this is only meant to be used in the context of
testing/CI, not in production.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 0866a280e40a7a2c7d7d50cc7e87c3f4652aff0a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| -rwxr-xr-x | utils/genrandconfig | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/utils/genrandconfig b/utils/genrandconfig index 0d08570bc5..8a6bdb6a0c 100755 --- a/utils/genrandconfig +++ b/utils/genrandconfig @@ -347,6 +347,9 @@ def gen_config(args): with open(minimalconfigfile) as minimalf: configlines += minimalf.readlines() + # Allow hosts with old certificates to download over https + configlines.append("BR2_WGET=\"wget --passive-ftp -nd -t 3 --no-check-certificate\"") + # Amend the configuration with a few things. if randint(0, 20) == 0: configlines.append("BR2_ENABLE_DEBUG=y\n") |
