git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH 3/5] gitlab-ci: drop workaround for Python certificate store on Windows

From
Toon Claes <toon@iotcl.com>
Date
Oct 6, 2025, 10:19 UTC
Message-ID
<875xcsbae7.fsf@iotcl.com>
In-Reply-To
<20251002-pks-gitlab-ci-windows-improvements-v1-3-6a8b6b45d728@pks.im>
Patrick Steinhardt <ps@pks.im> writes:
Show 19 quoted lines
> On Windows, we have been running into some issues in the past where the
> certificate store for Python is broken on the GitLab CI runners using
> Windows. The consequence was that we weren't able to establish any SSL
> connections via Python, but we need that feature so that we can download
> the Meson wraps. The workaround we employed was to import certificates
> from the cURL project into the certificate store via OpenSSL.
>
> This is obviously an ugly workaround. But even more importantly, this
> workaround fails every time Chocolatey updates its OpenSSL packages. The
> problem here is that the old OpenSSL package installer will be removed
> immediately once the newer version was published, But the Chocolatey
> community repository may not yet have propagated the new version of this
> package to all of its caches. The result is that for a couple hours (or
> sometimes even one or two days) we always fail to install OpenSSL until
> the new version was propagated.
>
> Luckily though, it turns out that the workaround doesn't seem to be
> required anymore. Drop it to work around the intermittent failures and
> to clean up some now-unneeded legacy cruft.

I assume this is a result of this change: https://gitlab.com/gitlab-org/ci-cd/shared-runners/images/gcp/windows-containers/-/merge_requests/72

Makes sense to clean this up.
-- 
Cheers,
Toon
Previous: Patrick SteinhardtNext: Patrick Steinhardt
Message 5 of 10 in “gitlab-ci: some fixes for failures on Windows”
  1. 0/5 gitlab-ci: some fixes for failures on WindowsPatrick Steinhardt, Oct 2, 2025
  2. 1/5 gitlab-ci: dedup instructions to disable realtime monitoringPatrick Steinhardt, Oct 2, 2025
  3. 2/5 gitlab-ci: ignore failures to disable realtime monitoringPatrick Steinhardt, Oct 2, 2025
  4. 3/5 gitlab-ci: drop workaround for Python certificate store on WindowsPatrick Steinhardt, Oct 2, 2025
  5. Toon ClaesOct 6, 2025
  6. 4/5 gitlab-ci: upload Meson test logs as JUnit reportsPatrick Steinhardt, Oct 2, 2025
  7. 5/5 t8020: fix test failure due to indeterministic tag sortingPatrick Steinhardt, Oct 2, 2025
  8. Kristoffer HaugsbakkOct 2, 2025
  9. Patrick SteinhardtOct 2, 2025
  10. Toon ClaesOct 6, 2025

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.