From owner-freebsd-python@FreeBSD.ORG  Thu Jan 29 18:55:56 2015
Return-Path: <owner-freebsd-python@FreeBSD.ORG>
Delivered-To: python@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 966F12FD
 for <python@FreeBSD.org>; Thu, 29 Jan 2015 18:55:56 +0000 (UTC)
Received: from bmx.buddyns.com (bmx.buddyns.com [188.164.131.93])
 by mx1.freebsd.org (Postfix) with SMTP id EAA157B8
 for <python@FreeBSD.org>; Thu, 29 Jan 2015 18:55:55 +0000 (UTC)
Received: (qmail 23619 invoked by uid 0); 29 Jan 2015 18:49:12 -0000
Received: from unknown (HELO ?10.228.96.103?) (michele@buddyns.com@unknown)
 by unknown with SMTP; 29 Jan 2015 18:49:12 -0000
From: michele <michele@buddyns.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Subject: FreeBSD Port: lang/python27
Message-Id: <930FE4CE-94D1-47EE-BF8A-906C3DD5BCB7@buddyns.com>
Date: Thu, 29 Jan 2015 19:49:01 +0100
To: python@FreeBSD.org
Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\))
X-Mailer: Apple Mail (2.1993)
X-BeenThere: freebsd-python@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: FreeBSD-specific Python issues <freebsd-python.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-python>,
 <mailto:freebsd-python-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-python/>
List-Post: <mailto:freebsd-python@freebsd.org>
List-Help: <mailto:freebsd-python-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-python>,
 <mailto:freebsd-python-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Jan 2015 18:55:56 -0000

Hey folks,

I=E2=80=99m dropping a quick note on this; didn=E2=80=99t have the time =
to look through:


Python 2.7.9 introduced SSL certificate validation by default. The =
default distribution
expects the CA at /etc/ssl/ , but FreeBSD stores it in =
/usr/local/etc/ssl .

This silently breaks all systems using SSL connection without change to =
infrastructure
or code. A simple symlink (see below) fixes the issue. I suppose this =
also effectively
requires to add "ca_root_nss" to RUN_DEPENDS.

=
http://www.quora.com/Are-your-Python-scripts-failing-like-this-urllib2-URL=
Error-urlopen-error-SSL-CERTIFICATE_VERIFY_FAILED-certificate-verify-faile=
d

cheers
michele=