Tom Kent <t...@teeks99.com> added the comment:

Christian's message indicated that a workaround was possible by adding 
mozilla's certs to windows cert store. 

I'm sure there are sysadmins who will really hate this idea, but I've 
successfully implemented it in a windows docker image, and wanted to document 
here.

Powershell commands, requires OpenSSL to be installed on the system:
```
cd $env:USERPROFILE;
Invoke-WebRequest https://curl.haxx.se/ca/cacert.pem -OutFile 
$env:USERPROFILE\cacert.pem;
$plaintext_pw = 'PASSWORD';
$secure_pw = ConvertTo-SecureString $plaintext_pw -AsPlainText -Force;
& 'C:\Program Files\OpenSSL-Win64\bin\openssl.exe' pkcs12 -export -nokeys -out 
certs.pfx -in cacert.pem -passout pass:$plaintext_pw;
Import-PfxCertificate -Password $secure_pw  -CertStoreLocation 
Cert:\LocalMachine\Root -FilePath certs.pfx;
```

Once mozilla's store is imported into the microsoft trusted root store, python 
has everything it needs to access files directly.

----------
nosy: +teeks99

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue36011>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to