Skip to content

PR suggestions - #955

Merged
sheetalarkadam merged 3 commits into
android-ssl-cainfo-fixfrom
skottmckay/android-ssl-suggestions
Aug 6, 2026
Merged

PR suggestions#955
sheetalarkadam merged 3 commits into
android-ssl-cainfo-fixfrom
skottmckay/android-ssl-suggestions

Conversation

@skottmckay

@skottmckay Scott McKay (skottmckay) commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

The cert file can be quite large on Android (IIRC > 50 system certs on the device tested a while ago). Suggestions to cache that as well as the CurlTransportOptions to minimize cost given the certs (AFAIK) aren't expected to change during the lifetime of the FL manager.

Ignore that description. My mental model was off. Changes are a lot more minor after injecting reality.

sheetalarkadam pick-and-choose anything you want. PR targets your branch if you want it all.

@vercel

vercel Bot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
foundry-local Ready Ready Preview Aug 6, 2026 7:26am

Request Review

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The process-wide cache can become stale across manager instances and does not cache the expensive certificate loading it intends to optimize.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

This review doesn't count toward merge requirements. Sign up for the private preview to control whether Copilot approvals count.

Pull request overview

Caches CA bundle configuration for libcurl-based HTTP operations.

Changes:

  • Adds shared curl transport options.
  • Applies cached options to HTTP and blob downloads.
  • Caches SSL_CERT_FILE lookup.
File summaries
File Description
sdk_v2/cpp/CMakeLists.txt Adds curl transport source.
sdk_v2/cpp/src/download/blob_downloader.cc Reuses cached curl options.
sdk_v2/cpp/src/http/curl_transport.cc Implements options cache.
sdk_v2/cpp/src/http/curl_transport.h Declares cached options API.
sdk_v2/cpp/src/http/http_client.cc Caches CA path and uses shared options.
sdk_v2/cpp/src/http/http_client.h Documents cached CA path behavior.
sdk_v2/cpp/src/http/http_download.cc Uses shared curl options.
Review details
  • Files reviewed: 7/7 changed files
  • Comments generated: 2
  • Review effort level: Balanced

We're testing this review assessment. Please use 👍 or 👎 to tell us if it's correct.

Comment thread sdk_v2/cpp/src/http/http_client.cc
Comment thread sdk_v2/cpp/src/http/curl_transport.cc Outdated
@sheetalarkadam
sheetalarkadam merged commit 5bc6af8 into android-ssl-cainfo-fix Aug 6, 2026
4 checks passed
@sheetalarkadam
sheetalarkadam deleted the skottmckay/android-ssl-suggestions branch August 6, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants