[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Łukasz Langa added the comment: New changeset 4ab6e524abd2d7f21c2d7a6eaee5be1f93baf140 by Miss Islington (bot) in branch '3.9': bpo-45457: Minor fix to documentation for SSLContext.load_default_certs. (GH-28947) (GH-29374)

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Łukasz Langa added the comment: New changeset 71f602b54c9c5346d22a542e186746b06cccfc8e by Miss Islington (bot) in branch '3.10': bpo-45457: Minor fix to documentation for SSLContext.load_default_certs. (GH-28947) (GH-29373)

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Change by miss-islington : -- pull_requests: +27634 pull_request: https://github.com/python/cpython/pull/29374 ___ Python tracker ___

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Łukasz Langa added the comment: New changeset 3551bf16ee5c25b6349209dd30e032f0f3b9ace3 by LincolnPuzey in branch 'main': bpo-45457: Minor fix to documentation for SSLContext.load_default_certs. (GH-28947) https://github.com/python/cpython/commit/3551bf16ee5c25b6349209dd30e032f0f3b9ace3

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Change by miss-islington : -- nosy: +miss-islington nosy_count: 11.0 -> 12.0 pull_requests: +27632 pull_request: https://github.com/python/cpython/pull/29373 ___ Python tracker

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Change by Lincoln Puzey : -- nosy: +LincolnPuzey nosy_count: 10.0 -> 11.0 pull_requests: +27238 pull_request: https://github.com/python/cpython/pull/28947 ___ Python tracker

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Alex Gaynor added the comment: Attached patch also adds a test -- I'm not convinced this is the best way to test this, but I don't see any other way either. -- Added file: http://bugs.python.org/file36793/issue22449.diff ___ Python tracker

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Roundup Robot added the comment: New changeset d9c52836aec8 by Benjamin Peterson in branch '2.7': also use openssl envvars to find certs on windows (closes #22449) https://hg.python.org/cpython/rev/d9c52836aec8 New changeset e1f453e13f8d by Benjamin Peterson in branch '3.4': also use openssl

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Christian Heimes added the comment: 'to respect' is the wrong term. /nitpicking The patch makes the code use the two env vars. Even with my patch the function doesn't respect SSL_CERT_DIR and SSL_CERT_FILE because Windows' cert store is still in use. On Linux and BSD the two env vars replace

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Antoine Pitrou added the comment: Do we have tests for SSL_CERT_DIR and SSL_CERT_FILE being respected? Otherwise, it might make sense to add one. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22449

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Christian Heimes added the comment: There is only a test case for ssl.get_default_verify_paths(), but not for SSLContext or SSLSocket. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22449

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

New submission from Christian Heimes: The behavior of SSLContext.load_verify_locations is rather inconsistent across platforms: On most POSIX platforms (Linux, BSD, non-Apple builds of OpenSSL) it loads certificates from predefined locations. The locations are defined during compile time and

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Changes by Ned Deily n...@acm.org: -- nosy: +ned.deily ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22449 ___ ___ Python-bugs-list mailing list

[issue22449] SSLContext.load_verify_locations behavior on Windows and OSX

Alex Gaynor added the comment: Does this effect anything besides causing SSL_CERT_DIR and SSL_CERT_FILE to be respected? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22449 ___