[issue10441] some stdlib modules need to be updated to handle SSL certificate validation

Antoine Pitrou report at bugs.python.org
Sat Nov 20 23:27:18 CET 2010


Antoine Pitrou <pitrou at free.fr> added the comment:

Martin,

> You misunderstood. I was not proposing that scripts provide a CA
> list, but that users might deploy a CA list into their Python
> installation, which is then picked up in the same way as you are asking
> for on Ubuntu.

Could you elaborate on what kind of scheme you are proposing?

It should be noted that the default OpenSSL paths can be modified at runtime using environment variables SSL_CERT_FILE and SSL_CERT_DIR. Not sure we should document this, though.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue10441>
_______________________________________


More information about the Python-bugs-list mailing list