[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Wu Wenyan
Wu Wenyan added the comment: OK. Thanks for your suggestion. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscrib

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Christian Heimes
Christian Heimes added the comment: I'm afraid I have to close this issue as OUT-OF-DATE. It's either a bug in pywbem or a 3.6-only bug. Python 3.6 is in security maintenance mode and no longer receive bug fixes. I suggest that you take this issue to pywbem bug tracker and get assistance th

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Wu Wenyan
Wu Wenyan added the comment: I tried to print "self.host" which would be passed to wrap_socket(). It seems no problem. > /usr/local/lib/python3.6/site-packages/pywbem/cim_http.py(616)connect() -> try: (Pdb) p self.host '193.168.11.113' (Pdb) n > /usr/local/lib/python3.6/site-packages/pywbem/cim

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Christian Heimes
Christian Heimes added the comment: It's a different issue on 3.6. According to the exception message you are not passing server_hostname to wrap_socket(). -- ___ Python tracker

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Wu Wenyan
Wu Wenyan added the comment: You are right. I used openssl.cnf when created a csr, and ignore it when created cer. Now the code works fine with python3.7, but still cannot work in python3.6. Traceback (most recent call last): File "", line 1, in File "/usr/local/lib/python3.6/site-package

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Christian Heimes
Christian Heimes added the comment: Your certificate does not have a subject alternative name extension. CN hostname matching has been deprecated for like 15 years. OpenSSL may ignore the CN and require a proper SAN extension of type IP general name. -- _

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Wu Wenyan
Wu Wenyan added the comment: I am running Python on Centos7. See result in attached file. -- Added file: https://bugs.python.org/file49306/server_cer.txt ___ Python tracker __

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Christian Heimes
Christian Heimes added the comment: Are you running Python 2.7 on RHEL 7? Python 2.7 on RHEL 7 does not very certs by defaults, see https://access.redhat.com/articles/2039753 Could you please post the output of 'openssl x509 -text -in path/to/cert' for your certificate? --

[issue41239] SSL Certificate verify failed in Python3.6/3.7

2020-07-08 Thread Wu Wenyan
New submission from Wu Wenyan : I am running the following code in python3.6 to connect to a storage. [root@controller wuwy]# python3 Python 3.6.8 (default, Jan 11 2019, 02:17:16) [GCC 8.2.1 20180905 (Red Hat 8.2.1-3)] on linux Type "help", "copyright", "credits" or "license" for more informatio