Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecate SSL common name #2804

Merged
merged 2 commits into from
Nov 1, 2022

Conversation

dlm6693
Copy link
Contributor

@dlm6693 dlm6693 commented Nov 1, 2022

This PR formally deprecates the usage of sslCommonName in endpoint resolution. This was a legacy codepath back when botocore supported python < 2.7. At this time python did not provide a SSL module, meaning certain certificate formats were needed. Now that new endpoint resolution via ruleset files has been released, this format is no longer necessary.

Please see #2705 for additional details.

@dlm6693 dlm6693 requested review from jonemo and nateprewitt November 1, 2022 15:40
@codecov-commenter
Copy link

codecov-commenter commented Nov 1, 2022

Codecov Report

Base: 93.57% // Head: 93.42% // Decreases project coverage by -0.14% ⚠️

Coverage data is based on head (3351b83) compared to base (4130446).
Patch coverage: 100.00% of modified lines in pull request are covered.

Additional details and impacted files
@@             Coverage Diff             @@
##           develop    #2804      +/-   ##
===========================================
- Coverage    93.57%   93.42%   -0.15%     
===========================================
  Files           63       63              
  Lines        13305    13300       -5     
===========================================
- Hits         12450    12426      -24     
- Misses         855      874      +19     
Impacted Files Coverage Δ
botocore/client.py 97.82% <100.00%> (-0.63%) ⬇️
botocore/regions.py 92.74% <0.00%> (-1.12%) ⬇️
botocore/utils.py 78.33% <0.00%> (-0.73%) ⬇️
botocore/httpsession.py 91.43% <0.00%> (-0.39%) ⬇️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

Copy link
Contributor

@nateprewitt nateprewitt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cool, I think this looks good! Let's add a release note entry for this, probably something like:

Enhancement
Endpoints
Discontinued use of sslCommonName hosts as detailed in 1.27.0 (old issue number here)

@dlm6693
Copy link
Contributor Author

dlm6693 commented Nov 1, 2022

@nateprewitt just pushed up the changelog. Also should mention I ran integration tests and didn't see any failures.

@dlm6693 dlm6693 merged commit 0e52189 into boto:develop Nov 1, 2022
@dlm6693 dlm6693 deleted the ssl-common-name-deprecation-removal branch November 1, 2022 17:42
aws-sdk-python-automation added a commit that referenced this pull request Nov 1, 2022
* release-1.29.0:
  Bumping version to 1.29.0
  Update to latest models
  use legacy resolver as source of default region name (#2805)
  Deprecate SSL common name (#2804)
  Enable endpoint resolution 2.0 for all services (#2802)
  Endpoint resolution v2 for Eventbridge (#2788)
  Supports versioned endpointsV2 files
  Add test cases for new endpoint models
  Add endpoint-rule-set-1.json files for every service
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants