title: pip: cert failed, but curl works
body: <p>We installed the our root cert on the client, and the https connection works for <code>curl</code>.</p>
  
  <p>But if we try to use <code>pip</code>, it fails:</p>
  
  <pre><code>Could not fetch URL https://installserver:40443/pypi/simple/pep8/:
  There was a problem confirming the ssl certificate: 
  &lt;urlopen error [Errno 1] _ssl.c:499: error:14090086:SSL
  routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed&gt;
  </code></pre>
  
  <p>The cert is on the client. See:</p>
  
  <pre><code>(foo_fm_qti)foo_fm_qti@vis-work:~$ curl -v https://installserver:40443/pypi/simple/pep8/
  * About to connect() to installserver port 40443 (#0)
  *   Trying 127.0.0.1... connected
  * Connected to installserver (127.0.0.1) port 40443 (#0)
  * successfully set certificate verify locations:
  *   CAfile: none
    CApath: /etc/ssl/certs/
  * SSLv3, TLS handshake, Client hello (1):
  * SSLv3, TLS alert, Client hello (1):
  * SSLv3, TLS handshake, Server hello (2):
  * SSLv3, TLS handshake, CERT (11):
  * SSLv3, TLS handshake, Server key exchange (12):
  * SSLv3, TLS handshake, Server finished (14):
  * SSLv3, TLS handshake, Client key exchange (16):
  * SSLv3, TLS change cipher, Client hello (1):
  * SSLv3, TLS handshake, Finished (20):
  * SSLv3, TLS change cipher, Client hello (1):
  * SSLv3, TLS handshake, Finished (20):
  * SSL connection using DHE-RSA-AES256-SHA
  * Server certificate:
  *    subject: C=DE; ST=Sachsen; L=Chemnitz; O=FOO-COM GmbH; OU=DV; CN=gray.foo-com.lan; emailAddress=info@foo-com.de
  *    start date: 2013-09-09 10:47:50 GMT
  *    expire date: 2019-05-24 10:47:50 GMT
  *    subjectAltName: installserver matched
  *    issuer: C=DE; ST=Sachsen; L=Chemnitz; O=FOO-COM GmbH; CN=FOO-COM Root CA; emailAddress=info@foo-com.de
  *    SSL certificate verify ok.
  &gt; GET /pypi/simple/pep8/ HTTP/1.1
  </code></pre>
  
  <p>Version: pip 1.4.1</p>