milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update

Browse source
This commit is contained in:
Reinier Criel 2025-11-12 14:01:06 -08:00
parent 285906ea9d
commit fbd11c6d44
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
packages/safe-chain/src/packagemanager/pip/runPipCommand.js
View file

@ -24,13 +24,14 @@ export async function runPip(command, args) {
if (!env.REQUESTS_CA_BUNDLE) {
env.REQUESTS_CA_BUNDLE = combinedCaPath;
}
// https://pip.pypa.io/en/stable/topics/https-certificates/ explains that the --cert option (which we're providing via both INI and PIP_CERT)
// Testing has shown that REQUESTS_CA_BUNDLE alone is not sufficient; PIP_CERT, SSL_CERT_FILE, or pip config cert is also needed in some cases.
if (!env.SSL_CERT_FILE) {
env.SSL_CERT_FILE = combinedCaPath;
}
// https://pip.pypa.io/en/stable/topics/https-certificates/ explains that the --cert option (which we're providing via both INI and PIP_CERT)
// is necessary for pip to use custom certs for later versions.
if (!env.PIP_CERT) {
env.PIP_CERT = combinedCaPath;
}