1398d20dc9
location to load CA certificates from in the "ssl" module. HTTPS requests to a site with a valid certificate now work out of the box (even without the "mozilla-rootcerts-openssl").
19 lines
675 B
C
19 lines
675 B
C
$NetBSD: patch-Modules__ssl.c,v 1.1 2016/02/06 11:25:09 tron Exp $
|
|
|
|
Use CA certificate file provided by "mozilla-rootcerts" package by default
|
|
|
|
--- Modules/_ssl.c.orig 2015-12-05 19:47:13.000000000 +0000
|
|
+++ Modules/_ssl.c 2016-02-06 11:12:59.865409460 +0000
|
|
@@ -2952,10 +2952,12 @@
|
|
static PyObject *
|
|
set_default_verify_paths(PySSLContext *self, PyObject *unused)
|
|
{
|
|
+ const char *cacert_pem = "@PREFIX@/share/mozilla-rootcerts/cacert.pem";
|
|
if (!SSL_CTX_set_default_verify_paths(self->ctx)) {
|
|
_setSSLError(NULL, 0, __FILE__, __LINE__);
|
|
return NULL;
|
|
}
|
|
+ SSL_CTX_load_verify_locations(self->ctx, cacert_pem, NULL);
|
|
Py_RETURN_NONE;
|
|
}
|
|
|