diff -r e21b0bbc06ea Lib/ssl.py --- a/Lib/ssl.py Sat Sep 20 08:54:32 2014 +0300 +++ b/Lib/ssl.py Sat Sep 20 12:00:04 2014 +0200 @@ -379,8 +379,9 @@ if sys.platform == "win32": for storename in self._windows_cert_stores: self._load_windows_store_certs(storename, purpose) - else: - self.set_default_verify_paths() + # always use OpenSSL's set_default_verify_paths to load certs + # from SSL_CERT_DIR and SSL_CERT_FILE env vars. + self.set_default_verify_paths() def create_default_context(purpose=Purpose.SERVER_AUTH, *, cafile=None,