Hi Kev,
Newer versions of Python are very strict when it comes to SSL certificate
validation. They don't trust self-signed certificates by default. As we're
going through the standard HTTPS machinery in Python, we're limited by what
Python does here.
Python doesn't necessarily use Apple's trusted certificate store. If you
run this command, you'll see where it's checking:
$ python -c 'import ssl; print ssl.get_default_verify_paths()'
Christian
On Fri, Oct 6, 2017 at 10:53 AM, Kevin Brock <[email protected]> wrote:
> After upgrading my macOS system to 10.13, and upgrading RBTools to 0.7.10,
> I started seeing a certificate error when I run rbt post.
>
> ERROR: Could not reach the Review Board server at https://reviewboard.
> yourcompany.com: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
> failed (_ssl.c:590)
>
> I saw in various discussion groups that there were similar errors a while
> back related to the upgrade from Python 2.6 to Python 2.7, and Apple
> upgraded to 2.7 on High Sierra, but those problems were supposed to be
> fixed several versions of RBTools ago, weren't they? I saw one message
> saying that the fix would be in 0.7.3...
>
> The relevant certificate *is* self-signed, but is marked as trusted for
> all uses in Keychain Access. Everything was working fine before the
> upgrade.
>
> Is there a fix known for this problem?
>
> Kev
>
>
>
>
>
> --
> Supercharge your Review Board with Power Pack:
> https://www.reviewboard.org/powerpack/
> Want us to host Review Board for you? Check out RBCommons:
> https://rbcommons.com/
> Happy user? Let us know! https://www.reviewboard.org/users/
> ---
> You received this message because you are subscribed to the Google Groups
> "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
>
--
Christian Hammond
President/CEO of Beanbag <https://www.beanbaginc.com/>
Makers of Review Board <https://www.reviewboard.org/>
--
Supercharge your Review Board with Power Pack:
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons:
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
---
You received this message because you are subscribed to the Google Groups
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
