[issue14780] urllib.request could use the default CA store

2012-05-16 Thread James Oakley
James Oakley added the comment: Ok, perfect. I submitted a copy of the agreement. -- ___ Python tracker <http://bugs.python.org/issue14780> ___ ___ Python-bug

[issue14780] urllib.request could use the default CA store

2012-05-16 Thread James Oakley
James Oakley added the comment: Ok, here's a patch with a test and documentation updates. -- Added file: http://bugs.python.org/file25617/cpython-urllib_urlopen_cadefault.patch ___ Python tracker <http://bugs.python.org/is

[issue14780] SSL should use OpenSSL-defined default certificate store if ca_certs parameter is omitted

2012-05-11 Thread James Oakley
James Oakley added the comment: Something like this perhaps? --- a/Lib/urllib/request.py Fri May 11 13:11:02 2012 -0400 +++ b/Lib/urllib/request.py Fri May 11 11:03:02 2012 -0700 @@ -135,16 +135,19 @@ _opener = None def urlopen(url, data=None, timeout=socket._GLOBAL_DEFAULT_TIMEOUT

[issue14780] SSL should use OpenSSL-defined default certificate store if ca_certs parameter is omitted

2012-05-11 Thread James Oakley
James Oakley added the comment: Fair enough. What about a patch to handle a directory store passed through the ca_certs parameter? As it stands now, it's impossible to load the distribution-supplied cert store on openSUSE. -- ___ Python tr

[issue14780] SSL should use OpenSSL-defined default certificate store if ca_certs parameter is omitted

2012-05-11 Thread James Oakley
James Oakley added the comment: load_verify_locations() is not available in Python 2.x. It was added in 3.x. Also, there is no way to load a directory-based certificate store at all in Python 2.x, which is why the bug was opened. -- ___ Python

[issue14780] SSL should use OpenSSL-defined default certificate store if ca_certs parameter is omitted

2012-05-10 Thread James Oakley
James Oakley added the comment: Here's the patch for Python 3. -- Added file: http://bugs.python.org/file25534/python-3.2.3-ssl_default_certs.patch ___ Python tracker <http://bugs.python.org/is

[issue14780] SSL should use OpenSSL-defined default certificate store if ca_certs parameter is omitted

2012-05-10 Thread James Oakley
New submission from James Oakley : OpenSSL provides a method, SSL_CTX_set_default_verify_paths(), for loading a default certificate store, which is used by many distributions. In openSUSE, the default store is not a bundle, but a directory-based store, which is not supported at all by the SSL