cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Close file descriptor of temporary file after building certificate chain (#71825)

Browse source 
* Close file descriptor of temporary file after building certificate chain.

* Add changelog fragment for PR71825
This commit is contained in:
Bernhard Dick 2020-09-30 20:43:24 +02:00 committed by GitHub
parent 3af7425367
commit f1c4a954d5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
changelogs/fragments/71825-close-file-descriptor-after-building-cert-chaing.yml Normal file
View file

@ -0,0 +1,3 @@
bugfixes:
- urls - Close filedescriptor of certificate chain tempfile to prevent stale
filedescriptor leakage (https://github.com/ansible/ansible/pull/71825).

2
lib/ansible/module_utils/urls.py
View file

@ -900,6 +900,8 @@ class SSLValidationHandler(urllib_request.BaseHandler):
if HAS_SSLCONTEXT:
default_verify_paths = ssl.get_default_verify_paths()
paths_checked[:0] = [default_verify_paths.capath]
else:
os.close(tmp_fd)
return (tmp_path, cadata, paths_checked)