Re: pkg/55212: python cannot verify SSL certificates

[Leonardo Taccari <leot%NetBSD.org@localhost>]

The following reply was made to PR pkg/55212; it has been noted by GNATS.

From: Leonardo Taccari <leot%NetBSD.org@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/55212: python cannot verify SSL certificates
Date: Mon, 27 Apr 2020 10:32:29 +0200

 Hello Dieter,
 
 dbaron%definitely.at@localhost writes:
 > [...]
 > >Description:
 > Python 3.7 installed via pkgsrc fails to verify certificates that are valid (as seen by all major browsers):
 >
 > urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1076)>
 >
 > >How-To-Repeat:
 > Run the following python 3 script:
 >
 > import urllib.request
 >
 > with urllib.request.urlopen("https://google.com/";) as request:
 >         data = request.read()
 >
 > >Fix:
 > I suspect Python and NetBSD/pkgsrc disagree over where the root certificates are stored.
 > [...]
 
 The real problem is probably that no certificates are installed.
 
 Please install security/mozilla-rootcerts-openssl (or populate
 /etc/openssl/certs), that should address that problem.