[issue23476] SSL cert verify fail for "www.verisign.com"

[Donald Stufft]

Donald Stufft added the comment:

There actually *is* an API that can be set that will cause OpenSSL to use the shortest trust path it can, however it's only available in OpenSSL 1.0.2+ which means it'll solve it for a handful of people but not the bulk of people.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue23476>
_______________________________________