[issue36011] ssl - tls verify on Windows fails

[Steve Dower]

Steve Dower <steve.dower at python.org> added the comment:

Thanks.

This is a well-known and long-standing issue between OpenSSL and Windows, and the best workaround right now is to use the Mozilla certs directly.

One day when OpenSSL is no longer part of the CPython public API, then we can consider switching to an HTTP implementation that uses the operating system support (which in my experimentation is 2-3x faster than using OpenSSL anyway, but a *big* breaking change for a lot of code). Until then, use the options provided by OpenSSL to enable it to verify what you need.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue36011>
_______________________________________