From nobody Sat Jan 10 22:53:27 2026 X-Original-To: python@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dpYpH5bRqz6N2yG for ; Sat, 10 Jan 2026 22:53:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dpYpH4xYyz3cF0 for ; Sat, 10 Jan 2026 22:53:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768085607; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ucQcLRwjWVRtoqMSq1g9SIboe3AVrHZUbcgZ12ZEZtQ=; b=wT4ofqiWFTvvfasQCKuic6ONHan3hkA1w9IcrM8qNiwB2I0LXcsMMHyUJTRq2IL+xotZmC cGZByuA/2tmO0D3hspGJe397phYlcHfmTSYDeVfQFaFA4b4IduUSf9Re9mXmErU68qAyIv 7xtD/RTPkEoH9DLvmN/QvXfvPmwlQwLXnkNlNHROsU61EpaGM41leYfcLZj9Sw+FrQDkFI PONc0uVSke6dhivDm9N5vusbH3mDv+He6yrdjZ73ypuK8zaL0PG7r5QiaWSsDuChVO1Nl5 Gx4BoQNdVk/RzmPhTaiG82e4i20O3VCAYCFVa4E/LTjb0zAMopP2dh73BX4uPA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768085607; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ucQcLRwjWVRtoqMSq1g9SIboe3AVrHZUbcgZ12ZEZtQ=; b=gTGNPJgsnS3LL+XTGBcjeHVEY5A9klxgVRljsVrrp5Q19p5AtUh/2vGN2vx8xZG/zjbD+K LEbcqe+mnJkcFmBdtZ0ziBLCUhUWJ4TEZDlo5PMC9aUfHlvQTF4WGZx16zRRlGi2iO3One 1zUyjQ7vCJR427XZ+h4wxHX+LftXetrTypcVIL9TLRvdROusLVbShQCSvcZzKhF48FFO6f 1avkQ2VMXbhPjABuQkWOytRhSbFYK0AEiL8ogMh1197yzSj1R20MuJ5C6yzJnW4rZEq+Fc VJfopf5bVuCh3eDYFgv6m+hYfqtbVZYtuuhksYRv8g0TF1TrtOR69AuEdDrbow== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768085607; a=rsa-sha256; cv=none; b=GXLJf0Z5qKIfpHI5ykRQ+h3JAXohNjjs5edXmQw8dE9ZgVmXHXPOhkMbBXSBL7Eh1sMaL5 2ROabAUERI2CX9S5UPwUeUJdPEMN0P5orjfxVWvM3zwmXmNQs7o5mJYy8vaS+XRvxMvl6h znt5ci/oAWVA3Bmv17uWUNeepYkXNjsSPd548hfB58bpzmCxCGq3y7eb2d5SQogaM8mvdi HoBU1mJ10lGXzUf2qfC1o2EixHiQzmETMlTyA6hgg47biGKSS1NWzjLdEM4Gq2AtV7Uhz5 Yc0vmGHf/q1fDM1X7x/ZHiah0vdgTb7mDSIrC35VBpvdawrBI87G2z0mBKui9g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dpYpH4MTdzdg for ; Sat, 10 Jan 2026 22:53:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 60AMrR7u005650 for ; Sat, 10 Jan 2026 22:53:27 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 60AMrRho005649 for python@FreeBSD.org; Sat, 10 Jan 2026 22:53:27 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: python@FreeBSD.org Subject: [Bug 251562] security/py-certifi: SSLError 'certificate verify failed' despite correct looking /etc/ssl/cert.pem Date: Sat, 10 Jan 2026 22:53:27 +0000 X-Bugzilla-Reason: CC AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: needs-patch, needs-qa X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: nimaje+fbz@bureaucracy.de X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: python@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: FreeBSD-specific Python issues List-Archive: https://lists.freebsd.org/archives/freebsd-python List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-python@freebsd.org Sender: owner-freebsd-python@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D251562 --- Comment #6 from Benjamin Takacs --- (In reply to Michael Osipov from comment #5) is that useable as drop-in replacement for py-certifi? Then I would suggest changing all dependencies on security/py-certifi to security/py-truststore.= If it is not, then it would mean patching all 53 reverse dependencies of security/py-certifi (I trust the number from freshports here). And that work should probably be upstream to make users profit on all platforms, not just= on FreeBSD. --=20 You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.=