[issue20916] ssl.enum_certificates() will not return all certificates trusted by Windows

[John Nagle]

John Nagle added the comment:

Amusingly, I'm getting this failure on "verisign.com" on Windows 7 with Python 2.7.9:

"HTTP error - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)..)"  The current Verisign root cert (Class 3 public) is, indeed, not in the Windows 7 cert store. Verisign has a newer root cert.

That error message ought to be improved. Tell the user which cert was rejected.

"python.org", with a DigiCert certificate, works fine.

I'm going to use the Mozilla certificate store explicitly.

----------
nosy: +nagle

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue20916>
_______________________________________