ca-certificates.crt not found on OS X

[Martin Pool]

A user of bzr 2.5b6 on OS X reports:

$ bzr launchpad-login djfroofy
Value "/etc/ssl/certs/ca-certificates.crt" is not valid for "ssl.ca_certs"
No valid trusted SSL CA certificates file set. See 'bzr help ssl.ca_certs' for more information on setting trusted CAs.

See `bzr help ssl.ca_certs` for how to specify trusted CAcertificates.
Pass -Ossl.cert_reqs=none to disable certificate verification entirely.

bzr: ERROR: _ssl.c:319: No root certificates specified for verification of other-side certificates.

That file doesn't exist.

OS X must have some root certificates. I don't know if they are in a file that we can easily read.

[Yonggang Luo (luoyonggang)]

D:\CI\bld\vcs\svn>bzr branch lp:~luoyonggang/subvertpy/python3
Value "C:\Python27\ca_bundle.crt" is not valid for "ssl.ca_certs"
No valid trusted SSL CA certificates file set. See 'bzr help ssl.ca_certs' for more information on setting trusted CAs.

See `bzr help ssl.ca_certs` for how to specify trusted CAcertificates.
Pass -Ossl.cert_reqs=none to disable certificate verification entirely.

bzr: ERROR: _ssl.c:331: No root certificates specified for verification of other-side certificates.

D:\CI\bld\vcs\svn>

[Vincent Ladeuil (vila)]

Removing the duplicate.

We should use this bug to target an additional value for ssl.ca_reqs that says:
- if valid root certificates are available, verify
- if they aren't issue a warning

Use this as the default value.

[Alex Yurchenko (ayurchen)]

Solaris x86 11, python 2.6, bzr-2.5.0 installed from source in /usr/local

$ bzr pull lp:codership-mysql/5.5 --remember
Value "/etc/ssl/certs/ca-certificates.crt" is not valid for "ssl.ca_certs"
No valid trusted SSL CA certificates file set. See 'bzr help ssl.ca_certs' for more information on setting trusted CAs.

See `bzr help ssl.ca_certs` for how to specify trusted CAcertificates.
Pass -Ossl.cert_reqs=none to disable certificate verification entirely.

bzr: ERROR: _ssl.c:316: No root certificates specified for verification of other-side certificates.

[Vincent Ladeuil (vila)]

@Alex: The bug title mentions OSX :)

Could you please file a new bug and tell us where/how the ssl certificates are stored on Solaris ?

In the mean time, as mentioned in the error message, you can disable the cert verification with -Ossl.cert_reqs=none.

[Bob Vincent (pillarsdotnet)]

Tried using "-Ossl.cert_reqs=none" and the error persists with no change.

[Vincent Ladeuil (vila)]

@Bob: This bug is marked 'Fix released', could you please file a new one and mention which versions of bzr and OSX you're using ?

Also, giving additional details about your environment and how the error manifests itself can only help, so, a relevant excerpt of your .bzr.log, which site you were trying to connect, things like that.

[anthony tyson (atyson1959)]

how do i get the bugs out