From e63b7e2b040e9128a6ed3ec57d58594f7baab877 Mon Sep 17 00:00:00 2001
From: Rye Mutt <rye@alchemyviewer.org>
Date: Mon, 11 Oct 2021 22:55:46 -0400
Subject: [PATCH] Explicitly use certifi bundle in template verifier

---
 scripts/template_verifier.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/scripts/template_verifier.py b/scripts/template_verifier.py
index 7a05bac5ad8..1efcf6d2272 100755
--- a/scripts/template_verifier.py
+++ b/scripts/template_verifier.py
@@ -35,6 +35,7 @@
 
 import sys
 import os.path
+import certifi
 
 # Look for indra/lib/python in all possible parent directories ...
 # This is an improvement over the setup-path.py method used previously:
@@ -141,7 +142,7 @@ def fetch(url):
         with open(file_name, 'rb') as f:
             return f.read()
     else:
-        with urllib.request.urlopen(url) as res:
+        with urllib.request.urlopen(url, cafile=certifi.where()) as res:
             body = res.read()
             if res.status > 299:
                 sys.exit("ERROR: Unable to download %s. HTTP status %d.\n%s" % (url, res.status, body.decode("utf-8")))
-- 
GitLab