progval / Limnoria

A robust, full-featured, and user/programmer-friendly Python IRC bot, with many existing plugins.
https://docs.limnoria.net/
Other
621 stars 174 forks source link

Limnoria/Web.fetch doesn't handle Let's Encrypt root CA expiry #1491

Open Mikaela opened 3 years ago

Mikaela commented 3 years ago

Regarding Let's Encrypt root CA expiry (Libera.Chat news), Limnoria appears to not handle it either.

<Mikaela> @web fetch https://expired-r3-test.scotthelme.co.uk/
<Limnoria> <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1056)>

https://expired-r3-test.scotthelme.co.uk/ is a test page to find clients that have trouble, it should give a simple page saying:

Success: Your device is able to connect to a server using the expired R3 Intermediate certificate.