Kami/python-yubico-client — Issue #5: verify_cert not triggering the HTTPS CA check correctly (or skipping it)
Author: mediamanrit
Created: 2012-03-09 14:43:45+00:00
State: open

In the Notes section on the project page (https://github.com/Kami/python-yubico-client), it says you have to specify “verifiy_cert = True” if you want to verify the HTTPS connection, and change CA_CERTS to point the path of a CA file. I left all the default values (including CA_CERTS=’’), and I got an exception: “Exception: If you want to validate server certificate, you need to set CA_CERTS variable in the httplib_ssl.py file pointing to a file which contains a list of trusted CA certificates”. I looked at yubico.py, and that exception is raised even if verify_cert=False. I THINK the if line should be changed to “if use_https and httplib_ssl and httplib_ssl.CA_CERTS == '' and verify_cert: “