Package: python-httplib2
Version: 0.9.2+dfsg-1
Severity: normal

Hi,

the following small script throws an exception saying that the
certificate validation has failed:

import httplib2
h = httplib2.Http(ca_certs='/etc/ssl/certs/ca-certificates.crt')
h.request("https://www.google.com";)

However, s_client seems to indicate that Google's certificate is valid,
using the same CA list:

$ openssl s_client -connect www.google.com:443 -CAfile
/etc/ssl/certs/ca-certificates.crt
...
    Verify return code: 0 (ok)
...

I believe that httplib2 should accept the connection as valid. For other
domains, like www.facebook.com, the certificate is accepted happily, so
I presume there is something that depends on the CA.

Thanks, Giovanni.


--- System information. ---
Architecture: Kernel:       Linux 4.17.0-1-amd64

Debian Release: buster/sid
  500 unstable-debug  debug.mirrors.debian.org   500 unstable
ftp.be.debian.org   500 testing         ftp.be.debian.org   500 stable
       repository.spotify.com   500 stable          repo.skype.com   500
stable          dl.google.com     1 experimental    ftp.be.debian.org
--- Package information. ---
Depends                 (Version) | Installed
=================================-+-==============
python:any               (<< 2.8) | python:any          (>= 2.7.5-5~) |
ca-certificates                   | 20180409


Package's Recommends field is empty.

Package's Suggests field is empty.
-- 
Giovanni Mascellani <g.mascell...@gmail.com>
Postdoc researcher - Université Libre de Bruxelles

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to