mozilla/django-browserid — Issue #8: SSLHandshakeError at /browserid/verify/
Author: ozten
Created: 2011-10-28 17:45:29+00:00
State: open

Using the latest django-browserid and the latest httplib2, I see the following error:

SSLHandshakeError at /browserid/verify/

[Errno 1] _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

The issue is the root GeoTrust cert isn't in httplib2's ca_cert file and/or chained certs.

There are a couple of ways to fix this:
* Use a custome ca_certs (I haven't test this to be true) which includes GeoTrust
* Use httplib2 version 0.6 and remove 0.7 keywords from django-browserid
* Add disable_ssl_certificate_validation=False config to django-browserid (weak sauce, tested works)

We're exploring fixing this at the browserid.org level also.