SSL certificate verify failed - #56

The problem is that httplib2 has recently started requiring SSL certs to be verified, but the list of CAs that it is honoring is not complete.

Options at this point are to pip httplib2 0.6.0 (you can do this by removing the installed one and installing the old version), or making a patch to httplib2 to give it a fuller list of CAs.

You can add to it here:
http://code.google.com/p/httplib2/issues/detail?id=156

I think I'd like to see an interim fix pushed out to fix this, as it will affect people deploying with pip or testing with tox or ...

Options:

1. release simply with a hard dependency on 0.6.0
2. disable cert validation during setup, which is same behaviour as with 0.6.0 but works with 0.7.x
3. bundle the DigiCert signature in this package for support with 0.7.0+

Any opinions? I've just switched to option 3 for our packages, but I'm not particularly tied to the decision.

Thanks,

James

The commits attached are for a simple, only lightly tested, option 3. Removes support for httplib2 <0.7, but it would be easy to support both if needed.

I suppose it doesn't matter in our case since we're only talking to GitHub, but I'll point out that supplying a ca_file to Httplib2 is not additive; that is, only DigiCert certificates will be trusted after this change.

By the way, for posterity, the DigiCert root included in this commit can be verified here:
https://www.digicert.com/digicert-root-certificates.htm