I struggled with this for a week or so recently. Why does python ignore the system ca-certificates bundle, and how do I integrate it? Python3 Traceback (most recent call last):įile '/usr/local/bin/python3.5/site-packages/requests/api.py', line 70, in getįile '/usr/local/bin/python3.5/site-packages/requests/api.py', line 56, in requestįile '/usr/local/bin/python3.5/site-packages/requests/sessions.py', line 488, in requestįile '/usr/local/bin/python3.5/site-packages/requests/sessions.py', line 609, in sendįile '/usr/local/bin/python3.5/site-packages/requests/adapters.py', line 497, in send Return session.request(method=method, url=url, **kwargs)įile '/usr/local/lib/python2.7/site-packages/requests/sessions.py', line 488, in requestįile '/usr/local/lib/python2.7/site-packages/requests/sessions.py', line 609, in sendįile '/usr/local/lib/python2.7/site-packages/requests/adapters.py', line 497, in send Return request('get', url, params=params, **kwargs)įile '/usr/local/lib/python2.7/site-packages/requests/api.py', line 56, in request Python2: Traceback (most recent call last):įile '/usr/local/lib/python2.7/site-packages/requests/api.py', line 70, in get At this point true | gnutls-cli mysite.local is happy, and true | openssl s_client -connect mysite.local:443 is happy, but python2 and python3 requests module insists it is not happy with the cert.

I've installed a self-signed root ca cert into debian's /usr/share/ca-certificates/local and installed them with sudo dpkg-reconfigure ca-certificates.

Debian buster