Hacktoberfest 2026:維護者為十月標記出來的 issue,仍然開放、適合新手。 瀏覽 Hacktoberfest issue

Docker build issues in environments with SSL/TLS inspection

未關閉
#258 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視

還沒有人認領這個 Issue。

評估

難度
4/5
預估耗時
3-5 天
新手友好度
38/100
Issue 類型
功能
描述清晰度
基本清楚
活躍度
停滯
技術堆疊
docker, python
領域
cli, devops, security

研究方向

從 cfn submit 命令以及使用 pip 安裝 Python 相依套件的 build-container 路徑開始。完成的定義是:新增一個 opt-in 旗標,在安裝相依套件期間傳遞所要求的 trusted-host 設定,同時預設保留目前的行為;issue 中未指定特定檔案或測試。

由索引模型根據 Issue 內容生成。

描述

Recently when working on a project where I was building a custom hook on behalf of my customer, I ran into issues firstly with not being able to see the error coming from the build container (as referenced in #250). After finally discovering the error, it turned out to be SSL errors being encountered during the attempt to install dependencies with pip:

connection error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:598)

Upon further inspection, the build environment has TLS inspection enabled and a self-signed certificate is inserted in the chain. The only way to make installations work in this environment outside of using an authenticated pull-through proxy, is by using --trusted-host xxxxxxxx flags with pip.

I'd like to open this is a potential feature request where a new flag could be submitted along with the cfn submit that would allow for the following flags to be submitted along with the rest of the requisite defaults:

--trusted-host pypi.org --trusted-host pypi.python.org --trusted-host files.pythonhosted.org

The flag to be submitted could look something like cfn submit --trust-self-signed-certs or cfn sub --dry-run --trust-self-signed-certs

主要語言
Python
星號
107
分支
46
PR 合併指標
30 天內沒有已合併 PR

環境準備

從這裡開始

  1. 先讀完整個 Issue,再讀專案的貢獻指南。
  2. 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
  3. Fork 儲存庫,在一個分支上完成修改。
  4. 送出 Pull Request,並在描述裡引用這個 Issue 編號。

aws-cloudformation/cloudformation-cli-python-plugin 的其他 Issue

查看 aws-cloudformation/cloudformation-cli-python-plugin 的全部 Issue

相似的 Issue

更多 Python Issue

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。