Steve Dower <steve.do...@python.org> added the comment:

Thanks.

This is a well-known and long-standing issue between OpenSSL and Windows, and 
the best workaround right now is to use the Mozilla certs directly.

One day when OpenSSL is no longer part of the CPython public API, then we can 
consider switching to an HTTP implementation that uses the operating system 
support (which in my experimentation is 2-3x faster than using OpenSSL anyway, 
but a *big* breaking change for a lot of code). Until then, use the options 
provided by OpenSSL to enable it to verify what you need.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue36011>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to