~bzr-pqm/bzr/bzr.dev

# Copyright (C) 2007 Canonical Ltd

#

# This program is free software; you can redistribute it and/or modify

# it under the terms of the GNU General Public License as published by

# the Free Software Foundation; either version 2 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA

"""Auto-detect of CA bundle for SSL connections"""

from __future__ import absolute_import

import os

import sys

from bzrlib.trace import mutter

_ca_path = None

def get_ca_path(use_cache=True):

    """Return location of CA bundle"""

    global _ca_path

    if _ca_path is not None and use_cache:

        return _ca_path

    # Find CA bundle for SSL

    # Reimplementation in Python the magic of curl command line tool

    # from "Details on Server SSL Certificates"

    # http://curl.haxx.se/docs/sslcerts.html

    #

    # 4. If you're using the curl command line tool, you can specify your own

    #    CA cert path by setting the environment variable CURL_CA_BUNDLE to the

    #    path of your choice.

    #

    #    If you're using the curl command line tool on Windows, curl will

    #    search for a CA cert file named "curl-ca-bundle.crt" in these

    #    directories and in this order:

    #      1. application's directory

    #      2. current working directory

    #      3. Windows System directory (e.g. C:\windows\system32)

    #      4. Windows Directory (e.g. C:\windows)

    #      5. all directories along %PATH%

    #

    # NOTES:

    #   bialix: Windows directories usually listed in PATH env variable

    #   j-a-meinel: bzr should not look in current working dir

    path = os.environ.get('CURL_CA_BUNDLE')

    if not path and sys.platform == 'win32':

        dirs = [os.path.realpath(os.path.dirname(sys.argv[0]))]     # app dir

        paths = os.environ.get('PATH')

        if paths:

            # don't include the cwd in the search

            paths = [i for i in paths.split(os.pathsep) if i not in ('', '.')]

            dirs.extend(paths)

        for d in dirs:

            fname = os.path.join(d, "curl-ca-bundle.crt")

            if os.path.isfile(fname):

                path = fname

                break

    if path:

        mutter('using CA bundle: %r', path)

    else:

        path = ''

    if use_cache:

        _ca_path = path

    return path