We're a bit behind on our python 2.x recipe, and 2.7.9 has just been released. It significantly improves SSL certificate handling in a number of different ways. For details see the announcement: https://www.python.org/downloads/release/python-279/ Quite a lot has changed in terms of how it is built since 2.7.3 which we have currently; for example upstream has added cross-compilation support but they have done it in a slightly different manner than we were patching in. I did start an upgrade to 2.7.6 a while ago which I didn't manage to finish, but it should hopefully give a head start on the upgrade - the branch can be found here (just the top commit): http://git.yoctoproject.org/cgit/cgit.cgi/poky-contrib/log/?h=paule/python276-wip
Upgraded: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=cb02ecb507ddad3cb17c78020b42c004aa2903ae