Replaced boto certificate

Replaced boto certificate

BUG=348233
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=259692

[pgervais, 2014-03-26 16:40:29]

I gather that the boto library is used only to connect to Google storage, so
using the Google set of certificates is safer.

The set of certificates has been obtained from this page:
http://pki.google.com/faq.html

[ghost stip (do not use), 2014-03-26 19:23:53]

lgtm, Sleevi for review

[Ryan Sleevi, 2014-03-26 19:37:56]

Are you planning to upgrade Boto from 2.8.0?

Notable applicable changes:
http://docs.pythonboto.org/en/latest/releasenotes/v2.9.1.html 
Added OrdinaryCallingFormat to support Google Storage’s certificate
verification. (commit 4ca83b)

http://docs.pythonboto.org/en/latest/releasenotes/v2.10.0.html
Updated the CA certificates Boto ships with. (issue 1578, commit 4dfadc8)


That first one concerns me.

[pgervais, 2014-03-26 20:02:59]

On 2014/03/26 19:37:56, Ryan Sleevi wrote:
> Are you planning to upgrade Boto from 2.8.0?
> 
> Notable applicable changes:
> http://docs.pythonboto.org/en/latest/releasenotes/v2.9.1.html 
> Added OrdinaryCallingFormat to support Google Storage’s certificate
> verification. (commit 4ca83b)
> 
> http://docs.pythonboto.org/en/latest/releasenotes/v2.10.0.html
> Updated the CA certificates Boto ships with. (issue 1578, commit 4dfadc8)
> 
> 
> That first one concerns me.

No problem on my side to update to a new version, I'd just like to know
beforehand how risky this is (has the API changed?). Note however, that this is
rather low in my priority list. I think that committing this CL now wouldn't
hurt, and I'll file another issue to update boto.

[pgervais, 2014-03-26 20:16:41]

Filed crbug.com/356814 to track boto update, and committing this CL soon.

[pgervais, 2014-03-26 21:13:50]

The CQ bit was checked by pgervais@chromium.org

[commit-bot: I haz the power, 2014-03-26 21:13:59]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/pgervais@chromium.org/212993005/1

[commit-bot: I haz the power, 2014-03-26 21:17:30]

Change committed as 259692

[Ryan Tseng, 2014-03-26 23:57:50]

A revert of this CL has been created in
https://codereview.chromium.org/213963002/ by hinoka@google.com.

The reason for reverting is: This causes download_from_google_storage to fail:
Failure: CA certificates file does not have expected SHA1 sum; expected:
ed024a78d9327f8669b3b117d9eac9e3c9460e9b, actual:
433e5589520cd2f1f29dea3e077cfbc2b74fb78c.

You'll need to also update the expectations on the gsutil side, and then reland.

Test it by running "gsutil ls"..