Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.mixmin.net!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed1.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.039 X-Spam-Evidence: '*H*': 0.92; '*S*': 0.00; 'subject:Python': 0.06; 'laura': 0.07; 'skip:/ 10': 0.09; 'cc:addr:python-list': 0.11; 'received:openend.se': 0.16; 'received:theraft.openend.se': 0.16; 'subject:SSL': 0.16; 'variable': 0.18; 'module': 0.19; 'cc:addr:python.org': 0.22; 'cc:2**1': 0.23; 'instance,': 0.24; 'environment': 0.24; "i've": 0.25; 'this:': 0.26; 'header:In- Reply-To:1': 0.27; 'point': 0.28; 'along': 0.30; 'work.': 0.31; 'requests': 0.31; 'cc:no real name:2**1': 0.33; 'problem': 0.35; 'something': 0.35; 'ubuntu': 0.36; 'charset:us-ascii': 0.36; 'url:org': 0.36; 'so,': 0.37; 'changed': 0.39; 'subject:"': 0.60; 'header:Message-Id:1': 0.63; 'hand': 0.80; 'ships': 0.84; 'received:89': 0.85; 'certificates': 0.91; 'url:latest': 0.91 To: John Nagle From: Laura Creighton Subject: Re: Python 2.7.9, 3.4.2 won't verify SSL cert for "verisign.com" In-Reply-To: Message from John Nagle of "Mon, 16 Feb 2015 23:05:31 -0800." References: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <28047.1424160040.1@fido> Date: Tue, 17 Feb 2015 09:00:40 +0100 Cc: python-list@python.org, lac@openend.se X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 12 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1424160053 news.xs4all.nl 2882 [2001:888:2000:d::a6]:45289 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:85734 I've seen something like this: The requests module http://docs.python-requests.org/en/latest/ ships with its own set of certificates "cacert.pem" and ignores the system wide ones -- so, for instance, adding certificates to /etc/ssl/certs on your debian or ubuntu system won't work. I edited it by hand and then changed the REQUESTS_CA_BUNDLE environment variable to point to it. Perhaps your problem is along the same lines? Laura