* Jakub Wilk <jw...@debian.org> [141114 14:17]:
> python3.4 has recently started to verify TLS certificates by default:
> https://bugs.python.org/issue22417
> 
> Please add an option to disable certificate verification.

Thanks for the hint.

I'll probably do this after the freeze, so here is a little brain
dump:

  - this is needed for python >= 3.4.3.
  - rss2email does not make the requests itself, it just passes a URL
    to feedparser.
  - on the feedparser side, the only extension mechanism is to pass a
    "handlers" kwarg to feedparser.parse(). It's then passed to
    urllib2.build_opener(). There does not seem to be a way to pass a
    context parameter to urllib2 there.

The python bug tracker suggests to monkeypatch the ssl module to
disable verification:

    ssl._create_default_https_context = ssl._create_unverified_context

It's a bit hacky, but seems simpler than patching feedparser to accept
a context argument (I would argue that fetching feeds is not
feedparser's job anyway). I would go with that solution.

-- 
Etienne Millon


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to