Do not enable TLS certificate revocation checks by default (#553)

Browse Source

This addresses an issue where network requests may fail if cert revocation checks
error, which may occur due to availability issues, or due to lack of internet access.

Revocation checking can still be enabled by setting JVM property com.sun.net.ssl.checkRevocation if on the JVM.

Also:
* Load built-in certs from resources, and move them to pkl-commons-cli
* Fix an issue where HttpInitException is not caught when loading a module

...

This commit is contained in:

Daniel Chao

2024-06-28 08:57:46 -07:00

committed by GitHub

parent 420336dc78

commit 51d7265ec6

6 changed files with 36 additions and 77 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

3593

pkl-cli/src/certs/resources/PklCARoots.pem

File diff suppressed because it is too large Load Diff