Your message dated Wed, 5 Sep 2018 16:56:33 +0800
with message-id <[email protected]>
and subject line python-httplib2 versio 0.11.3-1
has caused the Debian Bug report #907278,
regarding [python-httplib2] Certificate verification fails without apparent 
reason for some CAs
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
907278: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907278
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: python-httplib2
Version: 0.9.2+dfsg-1
Severity: normal

Hi,

the following small script throws an exception saying that the
certificate validation has failed:

import httplib2
h = httplib2.Http(ca_certs='/etc/ssl/certs/ca-certificates.crt')
h.request("https://www.google.com";)

However, s_client seems to indicate that Google's certificate is valid,
using the same CA list:

$ openssl s_client -connect www.google.com:443 -CAfile
/etc/ssl/certs/ca-certificates.crt
...
    Verify return code: 0 (ok)
...

I believe that httplib2 should accept the connection as valid. For other
domains, like www.facebook.com, the certificate is accepted happily, so
I presume there is something that depends on the CA.

Thanks, Giovanni.


--- System information. ---
Architecture: Kernel:       Linux 4.17.0-1-amd64

Debian Release: buster/sid
  500 unstable-debug  debug.mirrors.debian.org   500 unstable
ftp.be.debian.org   500 testing         ftp.be.debian.org   500 stable
       repository.spotify.com   500 stable          repo.skype.com   500
stable          dl.google.com     1 experimental    ftp.be.debian.org
--- Package information. ---
Depends                 (Version) | Installed
=================================-+-==============
python:any               (<< 2.8) | python:any          (>= 2.7.5-5~) |
ca-certificates                   | 20180409


Package's Recommends field is empty.

Package's Suggests field is empty.
-- 
Giovanni Mascellani <[email protected]>
Postdoc researcher - Université Libre de Bruxelles

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Control: fixe -1 0.11.3-1


-- 
ChangZhuo Chen (陳昌倬) czchen@{czchen,debconf,debian}.org
http://czchen.info/
Key fingerprint = BA04 346D C2E1 FE63 C790  8793 CC65 B0CD EC27 5D5B

Attachment: signature.asc
Description: PGP signature


--- End Message ---

Reply via email to