D:\src\osgeo4w\src\... paths in libcrypto-1_1

[andreaerdna]

With QGIS 3.16.11 and QGIS 3.20.3 installed via OSGeo4W v2 standalone installers:

Python 3.9.5 (tags/v3.9.5:0a7dcbd, May  3 2021, 17:27:52) [MSC v.1928 64 bit (AMD64)] on win32
Type "help", "copyright", "credits" or "license" for more information.
>>> import ssl
>>> ssl.get_default_verify_paths()
DefaultVerifyPaths(cafile=None, capath=None, openssl_cafile_env='SSL_CERT_FILE', openssl_cafile='D:\\src\\osgeo4w\\src\\openssl\\osgeo4w\\install\\apps\\openssl/cert.pem', openssl_capath_env='SSL_CERT_DIR', openssl_capath='D:\\src\\osgeo4w\\src\\openssl\\osgeo4w\\install\\apps\\openssl/certs')
>>>

The dlls: C:\Program Files\QGIS 3.20.3\apps\Python39\DLLs\libcrypto-1_1.dll C:\Program Files\QGIS 3.20.3\bin\libcrypto-1_1-x64.dll

contain the path strings:

D:\src\osgeo4w\src\openssl\osgeo4w\install\apps\openssl/private D:\src\osgeo4w\src\openssl\osgeo4w\install\apps\openssl D:\src\osgeo4w\src\openssl\osgeo4w\install\apps\openssl/certs D:\src\osgeo4w\src\openssl\osgeo4w\install\apps\openssl/cert.pem

See ​https://github.com/qgis/QGIS/issues/45377#issuecomment-948322785

[jef]

openssl was updated to 1.1.1l, which now depends on curl-ca-bundle and sets SSL_CERT_FILE and SSL_CERT_DIR.

[andreaerdna]

Replying to jef:

openssl was updated to 1.1.1l, which now depends on curl-ca-bundle and sets SSL_CERT_FILE and SSL_CERT_DIR.

It seems os.getenv("SSL_CERT_FILE") and os.getenv("SSL_CERT_DIR") return an empty string in the Python console of both QGIS 3.16.15 and QGIS 3.22.2 from OSGeo4W v2 Network Installer (the openssl package verion is openssl-1.1.1l-2). Is it normal?