Author pitrou
Recipients Lukasa, alex, christian.heimes, demian.brecht, dstufft, giampaolo.rodola, icordasc, janssen, lac, nagle, pitrou
Date 2015-02-24.16:20:37
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1424794837.63.0.58320185886.issue23476@psf.upfronthosting.co.za>
In-reply-to
Content
Ok, this is really a bug in the cert bundle provided by requests and Firefox.

With requests 2.5.1:

$ SSL_CERT_DIR=/tmp SSL_CERT_FILE=/tmp openssl s_client -CAfile requests/cacert.pem -connect verisign.com:443

=> ok

With requests 2.5.2:

$ SSL_CERT_DIR=/tmp SSL_CERT_FILE=/tmp openssl s_client -CAfile requests/cacert.pem -connect verisign.com:443

=> Verify return code: 20 (unable to get local issuer certificate)
History
Date User Action Args
2015-02-24 16:20:37pitrousetrecipients: + pitrou, janssen, nagle, giampaolo.rodola, christian.heimes, alex, icordasc, dstufft, demian.brecht, Lukasa, lac
2015-02-24 16:20:37pitrousetmessageid: <1424794837.63.0.58320185886.issue23476@psf.upfronthosting.co.za>
2015-02-24 16:20:37pitroulinkissue23476 messages
2015-02-24 16:20:37pitroucreate