New submission from James Oakley <jf...@funktronics.ca>:

OpenSSL provides a method, SSL_CTX_set_default_verify_paths(), for loading a 
default certificate store, which is used by many distributions.

In openSUSE, the default store is not a bundle, but a directory-based store, 
which is not supported at all by the SSL module in Python 2.7. A bug related to 
this was assigned to me here:

https://bugzilla.novell.com/show_bug.cgi?id=761501

I created patches for the Python 2.7.3 and 3.2.3 SSL modules that will load the 
distribution-specific store if ca_certs is omitted.

----------
components: Library (Lib)
files: python-2.7.3-ssl_default_certs.patch
keywords: patch
messages: 160392
nosy: jfunk
priority: normal
severity: normal
status: open
title: SSL should use OpenSSL-defined default certificate store if ca_certs 
parameter is omitted
type: enhancement
Added file: 
http://bugs.python.org/file25533/python-2.7.3-ssl_default_certs.patch

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue14780>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to