Skip to content

Conversation

@malept
Copy link
Member

@malept malept commented Apr 11, 2016

Consolidates cache and strict-ssl into the new download parameter, which is more or less passed directly to electron-download (similar to osx-sign and version-string). The original two parameters are now deprecated. This also lets us easily add sub-properties such as mirror (as requested in #316).

Depends on #319, so this might be a better diff to look at until it's merged.

Closes #316.

@malept malept added the blocked 🚫 Depends on another issue either in this project or a dependency's project label Apr 11, 2016
@malept malept added this to the 7.0.0 milestone Apr 11, 2016
@malept malept mentioned this pull request Apr 11, 2016
@malept malept force-pushed the consolidate-download-options branch from 131e0ae to 412d53f Compare April 13, 2016 05:47
@malept malept removed the blocked 🚫 Depends on another issue either in this project or a dependency's project label Apr 14, 2016
@malept malept force-pushed the consolidate-download-options branch from 412d53f to cd3f488 Compare April 14, 2016 15:08
@malept
Copy link
Member Author

malept commented Apr 14, 2016

This is in a better spot to be reviewed now, using the normal UI.

'download.strictSSL'
],
default: {
'strict-ssl': true,
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This actually fixes a bug with strict-ssl 😢

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should probably use the alias feature of minimist, so the two values are always in sync. Otherwise, the other default might overwrite the user setting.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, wow. Good catch. This means that users using electron-packager v6 from the command line will accept invalid ssl certificates.

This is bad enough that I would recommend running npm deprecate on all older versions so users know to upgrade.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unclear.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should probably use the alias feature of minimist, so the two values are always in sync. Otherwise, the other default might overwrite the user setting.

Hmm. I'll have to look into that, thanks.

@malept malept force-pushed the consolidate-download-options branch from bc35b61 to ebea1d8 Compare April 15, 2016 04:27
@malept malept merged commit a71992f into electron:master Apr 16, 2016
@malept malept deleted the consolidate-download-options branch April 16, 2016 03:34
'download.strictSSL'
],
default: {
'strict-ssl': true,
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All versions or just 6.x?

@malept malept mentioned this pull request Apr 20, 2016
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants