{"action":"created","issue":{"url":"https://api.github.com/repos/certtools/intelmq/issues/679","repository_url":"https://api.github.com/repos/certtools/intelmq","labels_url":"https://api.github.com/repos/certtools/intelmq/issues/679/labels{/name}","comments_url":"https://api.github.com/repos/certtools/intelmq/issues/679/comments","events_url":"https://api.github.com/repos/certtools/intelmq/issues/679/events","html_url":"https://github.com/certtools/intelmq/issues/679","id":176571752,"number":679,"title":"[8] Certificate store","user":{"login":"sebix","id":199050,"avatar_url":"https://avatars.githubusercontent.com/u/199050?v=3","gravatar_id":"","url":"https://api.github.com/users/sebix","html_url":"https://github.com/sebix","followers_url":"https://api.github.com/users/sebix/followers","following_url":"https://api.github.com/users/sebix/following{/other_user}","gists_url":"https://api.github.com/users/sebix/gists{/gist_id}","starred_url":"https://api.github.com/users/sebix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebix/subscriptions","organizations_url":"https://api.github.com/users/sebix/orgs","repos_url":"https://api.github.com/users/sebix/repos","events_url":"https://api.github.com/users/sebix/events{/privacy}","received_events_url":"https://api.github.com/users/sebix/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/certtools/intelmq/labels/feature%20request","name":"feature request","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/certtools/intelmq/milestones/1","html_url":"https://github.com/certtools/intelmq/milestones/v1.1%20Feature%20release","labels_url":"https://api.github.com/repos/certtools/intelmq/milestones/1/labels","id":719077,"number":1,"title":"v1.1 Feature release","description":"First feature release, fully compatible to 1.0","creator":{"login":"SYNchroACK","id":4184292,"avatar_url":"https://avatars.githubusercontent.com/u/4184292?v=3","gravatar_id":"","url":"https://api.github.com/users/SYNchroACK","html_url":"https://github.com/SYNchroACK","followers_url":"https://api.github.com/users/SYNchroACK/followers","following_url":"https://api.github.com/users/SYNchroACK/following{/other_user}","gists_url":"https://api.github.com/users/SYNchroACK/gists{/gist_id}","starred_url":"https://api.github.com/users/SYNchroACK/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SYNchroACK/subscriptions","organizations_url":"https://api.github.com/users/SYNchroACK/orgs","repos_url":"https://api.github.com/users/SYNchroACK/repos","events_url":"https://api.github.com/users/SYNchroACK/events{/privacy}","received_events_url":"https://api.github.com/users/SYNchroACK/received_events","type":"User","site_admin":false},"open_issues":75,"closed_issues":23,"state":"open","created_at":"2014-07-12T18:18:02Z","updated_at":"2016-10-05T17:19:54Z","due_on":"2016-12-31T00:00:00Z","closed_at":null},"comments":1,"created_at":"2016-09-13T07:39:53Z","updated_at":"2016-10-06T08:10:39Z","closed_at":null,"body":"* [requests](http://docs.python-requests.org/en/latest/user/advanced/#ssl-cert-verification) uses it's own store, which is basically a copy of mozilla's. The package by ubuntu-maintaines uses the system store.\r\n* sleekxmpp requires to get the path to a certificate store file. [doc](http://sleekxmpp.com/getting_started/echobot.html) and [code](https://github.com/fritzy/SleekXMPP/blob/master/sleekxmpp/xmlstream/xmlstream.py#L524)\r\n* [imbox](https://imapclient.readthedocs.io/en/stable/#tls-ssl) can use a [SSLContext](https://docs.python.org/3.4/library/ssl.html#ssl.SSLContext).\r\n\r\nIdea: Set the path to the certificate store globally in the defaults.conf, optionally in the bots. The default should be currently `/etc/ssl/certs/ca-certificates.crt` (as debian/ubuntu is currently the primary platform), and for packages provide a proper default."},"comment":{"url":"https://api.github.com/repos/certtools/intelmq/issues/comments/251895126","html_url":"https://github.com/certtools/intelmq/issues/679#issuecomment-251895126","issue_url":"https://api.github.com/repos/certtools/intelmq/issues/679","id":251895126,"user":{"login":"dmth","id":4152441,"avatar_url":"https://avatars.githubusercontent.com/u/4152441?v=3","gravatar_id":"","url":"https://api.github.com/users/dmth","html_url":"https://github.com/dmth","followers_url":"https://api.github.com/users/dmth/followers","following_url":"https://api.github.com/users/dmth/following{/other_user}","gists_url":"https://api.github.com/users/dmth/gists{/gist_id}","starred_url":"https://api.github.com/users/dmth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmth/subscriptions","organizations_url":"https://api.github.com/users/dmth/orgs","repos_url":"https://api.github.com/users/dmth/repos","events_url":"https://api.github.com/users/dmth/events{/privacy}","received_events_url":"https://api.github.com/users/dmth/received_events","type":"User","site_admin":false},"created_at":"2016-10-06T08:10:39Z","updated_at":"2016-10-06T08:10:39Z","body":"> needed for AH connections\r\n\r\n-> which is the xmpp-connection with sleekxmpp\r\n\r\nI opt for the global store which can be configured in defaults, it should have a fallback to the systems store (if applicable), if no custom store was configured. Whilst implementing, remember the n6 collector which requires it's own CA.\r\n"}}
{"actor":{"display_login":"dmth"}}