[Libreoffice-bugs] [Bug 125013] Python error 'certificate verify failed (_ssl.c:719)'

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=125013

Michael Stahl (CIB) <michael.stahl at cib.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|                            |QA:needsComment

--- Comment #4 from Michael Stahl (CIB) <michael.stahl at cib.de> ---
bug 109241 is about urllib not supporting https protocol at all, while if you
get a CERTIFICATE_VERIFY_FAILED error it clearly does try to use https, so it's
a different problem.

the 2 most likely reason why you get a CERTIFICATE_VERIFY_FAILED error is that
either the server certificate or one of its signing CA certificates is expired;
or the server certificates's CA certificate chain doesn't have a trusted root
in the bundled certificates that CPython uses, which i'd assume (but haven't
checked) are the bundled certificates of LO's OpenSSL library.

without knowing what the reason of the CERTIFICATE_VERIFY_FAILED error is, it's
hard to tell of course...

of course ideally urlib would use the operating system's CA store to verify
stuff instead of whatever OpenSSL bundles, which would give the user a UI tool
to add additional trusted CA certificates or remove default ones they don't
trust - but i have no idea if that is possible.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20190514/b19dc14d/attachment.html>