[issue8655] Problem with getpeercert in the ssl module when retrieving client side certs

[Antoine Pitrou]

Antoine Pitrou <pitrou at free.fr> added the comment:

> When I use the argument to make certs optional, it gave me an error
> saying it need the ca certs, so I downloaded them and specified to use
> them, and now I am getting errors from ssl.c

You have to specify the CA cert corresponding to the Certificate
Authority (CA) who has signed your certificate.
A CA can be a company such as Verisign, etc.

However, in this case, you have self-signed the certificate; so the only
"CA cert" you can specify is the client certificate itself. If you
specify "client.crt" as the ca_certs argument, you'll see that it works.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue8655>
_______________________________________