https://bugzilla.novell.com/show_bug.cgi?id=844546 https://bugzilla.novell.com/show_bug.cgi?id=844546#c2 Jan Matejek changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID --- Comment #2 from Jan Matejek 2013-10-08 12:22:57 UTC --- the behavior you see is actually correct ;e) You are supposed to either set your own certificate store, by providing the ca_certs argument to wrap_socket - or state explicitly that you want to use system defaults. Python 3 exposes openssl's set_default_verify_paths() call. To fix your code, you must add the following line after the wrap_socket call: ssl_sock.context.set_default_verify_paths() Arguably, our python2 with the ssl_ca_path patch behaves better in the common case; however, it departs from upstream's default behavior by silently loading openssl's default certificates, which might not be what you want. This is why in python3 we leave the original behavior intact. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.