> As I suspected, Windows image lacks the recent Root CA from Let's > Encrypt (famous ISRG Root X1 / IdenTrust DST Root CA X3 issue). > Normally Windows should automagically update Root CAs during > invoking the Schanel crypto library, but Python uses OpenSSL, so > magic does not happen.
Ah, thanks. I'm a complete noob with such things. > Here my solution to fetch all valid CAs and install them to trusted > datastore: > https://gitlab.freedesktop.org/freetype/freetype/-/merge_requests/129 I've applied it, thanks a lot. Unfortunately, it fails, see https://gitlab.freedesktop.org/freetype/freetype/-/jobs/17510562 for example. Werner
