Skip to content

Revert "Use root certificates when using the add-on store and NVDA remote (#18528)"#19106

Merged
SaschaCowley merged 1 commit into
masterfrom
revert-18528
Oct 17, 2025
Merged

Revert "Use root certificates when using the add-on store and NVDA remote (#18528)"#19106
SaschaCowley merged 1 commit into
masterfrom
revert-18528

Conversation

@seanbudd

@seanbudd seanbudd commented Oct 15, 2025

Copy link
Copy Markdown
Member

This reverts commit 2fa3658.

Reverts PR

Reverts #18528

Issues fixed

Fixes #19076

Issues reopened

Reopens #15905

Reason for revert

  • Add-on API solution doesn't work - extracting SSL from context is dangerous
  • Regression with NVDA remote

Can this PR be reimplemented? If so, what is required for the next attempt

  • Instead use trust store directly rather than injecting into all SSL contextx

Copilot AI review requested due to automatic review settings October 15, 2025 07:47
@seanbudd seanbudd requested a review from a team as a code owner October 15, 2025 07:47
@seanbudd seanbudd requested a review from SaschaCowley October 15, 2025 07:47

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR reverts commit 2fa3658, which introduced Windows root certificate usage via the truststore library for the add-on store and NVDA remote functionality.

  • Removes truststore dependency and initialization from core startup
  • Reverts to custom certificate handling logic in networking utilities
  • Restores original SSL context configuration for remote client connections

Reviewed Changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
user_docs/en/changes.md Removes changelog entries about truststore integration and related fixes
source/utils/networking.py Deletes the entire networking utility module that provided truststore-based certificate handling
source/updateCheck.py Restores original certificate update logic and removes truststore-related deprecations
source/core.py Removes truststore initialization from main startup function
source/addonStore/network.py Reverts to simpler download logic without certificate verification handling
source/addonStore/dataManager.py Removes truststore-based networking calls in favor of direct requests
source/_remoteClient/transport.py Restores original SSL context configuration without truststore
pyproject.toml Removes truststore dependency from project requirements

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Comment thread source/_remoteClient/transport.py
Comment thread source/_remoteClient/transport.py
@hwf1324

hwf1324 commented Oct 17, 2025

Copy link
Copy Markdown
Contributor

Can this PR be merged within this week?

@SaschaCowley SaschaCowley merged commit 079573d into master Oct 17, 2025
29 checks passed
@SaschaCowley SaschaCowley deleted the revert-18528 branch October 17, 2025 02:41
@github-actions github-actions Bot added this to the 2026.1 milestone Oct 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

NVDA alpha: Remote access cannot connect

4 participants