[issue36011] ssl - tls verify on Windows fails

Change by Tianon : -- nosy: +tianon ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36011] ssl - tls verify on Windows fails

Tom Kent added the comment: Christian's message indicated that a workaround was possible by adding mozilla's certs to windows cert store. I'm sure there are sysadmins who will really hate this idea, but I've successfully implemented it in a windows docker image, and wanted to document

[issue36011] ssl - tls verify on Windows fails

Steve Dower added the comment: Thanks. This is a well-known and long-standing issue between OpenSSL and Windows, and the best workaround right now is to use the Mozilla certs directly. One day when OpenSSL is no longer part of the CPython public API, then we can consider switching to an

[issue36011] ssl - tls verify on Windows fails

Christian Korneck added the comment: quick addition: It looks like all recent Windows versions (Win8/Server 2012, Win8.1/Server 2012R2, Win10 (older versions)/Server 2016, Win10-1809/Server 2019 behave the same (= only very few RootCAs are pre-installed out of the box, additional ones are