[issue45372] Unwarranted "certificate has expired" when urlopen-ing R3 sites

[Marc-Andre Lemburg]

Marc-Andre Lemburg <mal at egenix.com> added the comment:

On 05.10.2021 12:48, Aivar Annamaa wrote:
> 
> I can list the root certs with certmgr, but I'm not sure which piece to investigate further. 

Check the certs in the LE chain as listed on the page you quoted
and compare them to the working installation.

> Even if there is problem with installed certs, it's interesting, why doesn't it bother the browsers and requests? Maybe this is opportunity to make something better in urllib?

Browsers and requests use their own list of trusted CAs.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue45372>
_______________________________________