Antoine Pitrou added the comment: Ok, this is really a bug in the cert bundle provided by requests and Firefox.
With requests 2.5.1: $ SSL_CERT_DIR=/tmp SSL_CERT_FILE=/tmp openssl s_client -CAfile requests/cacert.pem -connect verisign.com:443 => ok With requests 2.5.2: $ SSL_CERT_DIR=/tmp SSL_CERT_FILE=/tmp openssl s_client -CAfile requests/cacert.pem -connect verisign.com:443 => Verify return code: 20 (unable to get local issuer certificate) ---------- _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue23476> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com