aboutsummaryrefslogtreecommitdiff
path: root/urllib3/connectionpool.py
diff options
context:
space:
mode:
Diffstat (limited to 'urllib3/connectionpool.py')
-rw-r--r--urllib3/connectionpool.py8
1 files changed, 5 insertions, 3 deletions
diff --git a/urllib3/connectionpool.py b/urllib3/connectionpool.py
index c958725..fe2f546 100644
--- a/urllib3/connectionpool.py
+++ b/urllib3/connectionpool.py
@@ -28,7 +28,7 @@ from .exceptions import (
InsecureRequestWarning,
)
from .packages.ssl_match_hostname import CertificateError
-from .packages import six
+import six
from .connection import (
port_by_scheme,
DummyConnection,
@@ -679,6 +679,8 @@ class HTTPSConnectionPool(HTTPConnectionPool):
``ssl_version`` are only used if :mod:`ssl` is available and are fed into
:meth:`urllib3.util.ssl_wrap_socket` to upgrade the connection socket
into an SSL socket.
+
+ On Debian, SSL certificate validation is required by default
"""
scheme = 'https'
@@ -688,8 +690,8 @@ class HTTPSConnectionPool(HTTPConnectionPool):
strict=False, timeout=Timeout.DEFAULT_TIMEOUT, maxsize=1,
block=False, headers=None, retries=None,
_proxy=None, _proxy_headers=None,
- key_file=None, cert_file=None, cert_reqs=None,
- ca_certs=None, ssl_version=None,
+ key_file=None, cert_file=None, cert_reqs='CERT_REQUIRED',
+ ca_certs='/etc/ssl/certs/ca-certificates.crt', ssl_version=None,
assert_hostname=None, assert_fingerprint=None,
**conn_kw):