Skip to content

Error on empty CA bundle value - #10497

Merged
AndrewAsseily merged 2 commits into
aws:v2from
alexgromero:fix/empty-ca-bundle-value
Jul 21, 2026
Merged

Error on empty CA bundle value#10497
AndrewAsseily merged 2 commits into
aws:v2from
alexgromero:fix/empty-ca-bundle-value

Conversation

@alexgromero

@alexgromero alexgromero commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Issue #, if available:

Description of changes:
The CLI now errors when a CA bundle value (--ca-bundle, the ca_bundle profile setting, AWS_CA_BUNDLE, or REQUESTS_CA_BUNDLE) resolves to an empty string.

An empty string is not a valid value for these settings, which are defined as paths to a CA bundle.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@alexgromero
alexgromero requested a review from a team as a code owner July 17, 2026 21:43
@alexgromero
alexgromero force-pushed the fix/empty-ca-bundle-value branch from 1393636 to bb8054f Compare July 17, 2026 22:39

@AndrewAsseily AndrewAsseily left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me! Just left a small nit

Comment thread awscli/botocore/endpoint.py Outdated
)

def _validate_verify_value(self, verify):
if isinstance(verify, str) and not verify:

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: not verify is only true for ''. not verify.strip() is true for '' and any all-whitespace strings (' ', '\t', '\n') if we want an InvalidConfigError for those too

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good point! Added in 16905aa.

@AndrewAsseily AndrewAsseily left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🏆

@AndrewAsseily
AndrewAsseily merged commit 100538e into aws:v2 Jul 21, 2026
70 of 73 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants