stripe-python icon indicating copy to clipboard operation
stripe-python copied to clipboard

hide misleading ssl security warning in python>=2.7.9

Open asottile-sentry opened this issue 3 years ago • 2 comments

urllib2 (python >=2.7.9) and urllib.request (python>=3.2) do validate ssl

for example:

$ docker run --rm -ti python:2.7.8-slim python -c 'import urllib2; urllib2.urlopen("https://expired.badssl.com")'
$ docker run --rm -ti python:2.7.9-slim python -c 'import urllib2; urllib2.urlopen("https://expired.badssl.com")'
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/local/lib/python2.7/urllib2.py", line 154, in urlopen
    return opener.open(url, data, timeout)
  File "/usr/local/lib/python2.7/urllib2.py", line 431, in open
    response = self._open(req, data)
  File "/usr/local/lib/python2.7/urllib2.py", line 449, in _open
    '_open', req)
  File "/usr/local/lib/python2.7/urllib2.py", line 409, in _call_chain
    result = func(*args)
  File "/usr/local/lib/python2.7/urllib2.py", line 1240, in https_open
    context=self._context)
  File "/usr/local/lib/python2.7/urllib2.py", line 1197, in do_open
    raise URLError(err)
urllib2.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)>

asottile-sentry avatar Sep 15 '22 22:09 asottile-sentry

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Sep 15 '22 22:09 CLAassistant

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

CLAassistant avatar Sep 15 '22 22:09 CLAassistant