OpenSSL Error about bwscanner HOT 11 CLOSED

The agent is defined in https://github.com/juga0/bwscanner/blob/develop/bwscanner/fetcher.py#L76.

In theory twisted should be using the certificates system path in trustRoot (https://twistedmatrix.com/documents/17.1.0/api/twisted.web.client.BrowserLikePolicyForHTTPS.html)

from bwscanner.

What OS are you running this on?

from bwscanner.

Debian, so cacert is missing, but that shouldn't be the issue.

from bwscanner.

Another thing to try would be the now built-in txtorcon agent, available via Tor.web_agent() or Circuit.web_agent() (the latter uses the given circuit only).

from bwscanner.

Yeah IME Debian works fine. You could try installing certifi (Python package) but .. shouldn't need to?

from bwscanner.

Actually i tried SSL_CERT_FILE="$(python -m certifi)" as explained in twisted/treq#94, and then i didn't get this error, but still this shouldn't be needed...

from bwscanner.

Running Circuit.web_agent() in this example https://github.com/meejah/txtorcon/blob/master/examples/web_client_custom_circuit.py#L47 also gives certificate error.
Maybe twisted version we are using here (16.0.2)?. I'll try with others.

from bwscanner.

Last version also gives the error.

from bwscanner.

Do you have the "ca-certificates" package installed in Debian?

from bwscanner.

Yes.

from bwscanner.

Upgrading pyOpenSSL to 17.5.0 seems to solve the issue.

from bwscanner.