Merge branch 'fix-default-cert' into 'dev'

Fix missing default certificates

See merge request caosdb/caosdb-pylib!16

CHANGELOG.md

@@ -18,6 +18,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - [pytest](https://docs.pytest.org/en/latest/) is the new preferred unit test frame work.
 - If a password is specified in the configuration even though the password_method is not set to `plain`, a warning is logged.
 - Under the hood, the password of from a `pass` or `keyring` call is not stored anymore. Instead the password is requested each time a login is necessary.
+- Always load system default CA repository into the ssl context
 
 
 ### Deprecated

src/caosdb/connection/connection.py

@@ -32,14 +32,13 @@ from builtins import str  # pylint: disable=redefined-builtin
 from errno import EPIPE as BrokenPipe
 from socket import error as SocketError
 
-from pkg_resources import resource_filename
-
 from caosdb.configuration import get_config
 from caosdb.exceptions import (AuthorizationException, CaosDBException,
                                ClientErrorException, ConfigurationException,
                                ConnectionException, EntityDoesNotExistError,
                                LoginFailedException, ServerErrorException,
                                URITooLongException)
+from pkg_resources import resource_filename
 
 from .interface import CaosDBHTTPResponse, CaosDBServerConnection
 from .streaminghttp import StreamingHTTPSConnection
@@ -197,6 +196,8 @@ class _DefaultCaosDBServerConnection(CaosDBServerConnection):
                                           "`{}`: {}".format(config["cacert"],
                                                             exc))
 
+        context.load_default_certs()
+
         if "url" in config:
             parsed_url = parse_url(config["url"])
             host = parsed_url.netloc
@@ -336,7 +337,7 @@ def configure_connection(**kwargs):
     global_conf = {}
     conf = get_config()
     # Convert config to dict, with preserving types
-    int_opts =  ["timeout"]
+    int_opts = ["timeout"]
     bool_opts = ["ssl_insecure"]
     if conf.has_section("Connection"):
         global_conf = dict(conf.items("Connection"))