http://bugzilla.suse.com/show_bug.cgi?id=1007978
Bug ID: 1007978
Summary: python3-reqests missing ca-bundle.pem
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 42.2
Hardware: All
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Other
Assignee: bnc-team-screening@forge.provo.novell.com
Reporter: mvanorder1390@gmail.com
QA Contact: qa-bugs@suse.de
Found By: ---
Blocker: ---
The python3-requests-2.7.0-3.3.noarch package doesn't specify a location for
the certificate, so when trying to use it with the default .pem file it crashes
the application.
Example to duplicate:
python2 -c "import requests; print(requests.get('https://google.com'))"
mvanorder@linux-qsvs:/mnt/linuxdata/home/pirate/dev/dotool> python3 -c "import
requests; print(requests.get('https://google.com'))"
Traceback (most recent call last):
File
"/usr/lib/python3.4/site-packages/requests/packages/urllib3/connectionpool.py",
line 544, in urlopen
body=body, headers=headers)
File
"/usr/lib/python3.4/site-packages/requests/packages/urllib3/connectionpool.py",
line 341, in _make_request
self._validate_conn(conn)
File
"/usr/lib/python3.4/site-packages/requests/packages/urllib3/connectionpool.py",
line 761, in _validate_conn
conn.connect()
File
"/usr/lib/python3.4/site-packages/requests/packages/urllib3/connection.py",
line 238, in connect
ssl_version=resolved_ssl_version)
File
"/usr/lib/python3.4/site-packages/requests/packages/urllib3/util/ssl_.py", line
279, in ssl_wrap_socket
return context.wrap_socket(sock, server_hostname=server_hostname)
File "/usr/lib64/python3.4/ssl.py", line 362, in wrap_socket
_context=self)
File "/usr/lib64/python3.4/ssl.py", line 580, in __init__
self.do_handshake()
File "/usr/lib64/python3.4/ssl.py", line 807, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
(_ssl.c:600)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/lib/python3.4/site-packages/requests/adapters.py", line 367, in
send
timeout=timeout
File
"/usr/lib/python3.4/site-packages/requests/packages/urllib3/connectionpool.py",
line 574, in urlopen
raise SSLError(e)
requests.packages.urllib3.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED]
certificate verify failed (_ssl.c:600)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/usr/lib/python3.4/site-packages/requests/api.py", line 69, in get
return request('get', url, params=params, **kwargs)
File "/usr/lib/python3.4/site-packages/requests/api.py", line 50, in request
response = session.request(method=method, url=url, **kwargs)
File "/usr/lib/python3.4/site-packages/requests/sessions.py", line 465, in
request
resp = self.send(prep, **send_kwargs)
File "/usr/lib/python3.4/site-packages/requests/sessions.py", line 573, in
send
r = adapter.send(request, **kwargs)
File "/usr/lib/python3.4/site-packages/requests/adapters.py", line 428, in
send
raise SSLError(e, request=request)
requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate
verify failed (_ssl.c:600)
There's no location provided for the cert:
python2 -c "import requests; print(requests.certs.where())"
/etc/ssl/ca-bundle.pem
python3 -c "import requests; print(requests.certs.where())"
None
The following is the file that's causing the issue:
diff /usr/lib/python3.4/site-packages/requests/certs.py /usr/lib/python2.7/site-packages/requests/certs.py
0a1
#!/usr/bin/env python
4,5c5,6
< certs.py
< ~~~~~~~~
requests.certs
~~~~~~~~~~~~~~
20,21c21,23
< # vendored bundle inside Requests
< return None
# in openSUSE we rely on ca-certificates instead of
# having an another bundle
return '/etc/ssl/ca-bundle.pem'
--
You are receiving this mail because:
You are on the CC list for the bug.
