[issue15740] test_ssl failure when cacert.org CA cert in system keychain on OSX

[Antoine Pitrou]

Antoine Pitrou added the comment:

> The failure seems to occur because the test assumes that the OpenSSL
> library either won't load a CA list at all when ca_cert is not
> specified, or that the default CA list doesn't contain the cacert.org one.

Well, OpenSSL should not implicitly load a CA list when not asked to.
If it does, it means Apple hacked their OpenSSL copy.
(I am further surprised that Apple includes cacert by default in the trusted certificates, while mainstream browsers like Firefox don't)

----------
nosy: +pitrou

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue15740>
_______________________________________