sqlmapproject/sqlmap · error · H2Error

certificate verification requires ssl.create_default_context

Error message

certificate verification requires ssl.create_default_context

What it means

Error "certificate verification requires ssl.create_default_context" thrown in sqlmapproject/sqlmap.

Source

Thrown at lib/request/http2.py:639

        code = int(fields[1]) if len(fields) >= 2 and fields[1].isdigit() else 0
        if not 200 <= code < 300:
            raise H2Error("proxy CONNECT failed: %s" % status_line)
        return raw
    except Exception:
        try:
            raw.close()
        except Exception:
            pass
        raise


def _make_ssl_context(verify, ssl_context):
    context = ssl_context
    if context is None:
        if verify:
            creator = getattr(ssl, "create_default_context", None)
            if creator is None:
                raise H2Error("certificate verification requires ssl.create_default_context")
            context = creator()
        else:
            creator = getattr(ssl, "_create_unverified_context", None)
            if creator is not None:
                context = creator()
            else:
                context = ssl.SSLContext(ssl.PROTOCOL_SSLv23)
                context.verify_mode = ssl.CERT_NONE
    tls_version = getattr(ssl, "TLSVersion", None)
    if tls_version is not None and hasattr(context, "minimum_version"):
        if context.minimum_version < tls_version.TLSv1_2:
            context.minimum_version = tls_version.TLSv1_2
    else:
        for option_name in ("OP_NO_SSLv2", "OP_NO_SSLv3", "OP_NO_TLSv1", "OP_NO_TLSv1_1"):
            option = getattr(ssl, option_name, 0)
            if option:
                context.options |= option
    no_compression = getattr(ssl, "OP_NO_COMPRESSION", 0)

View on GitHub (pinned to 0a35b20e39)

When it happens

Trigger: Thrown at lib/request/http2.py:639 when the library encounters an invalid state.

Common situations: See trigger scenarios.

Understand the failure class

• SSL/TLS and certificate errors — how TLS handshakes and certificate validation fail.

AI-assisted analysis of sqlmapproject/sqlmap@0a35b20e39 (2026-08-26). Data as JSON: /api/errors/41ab74fb0727f528. Report an issue: GitHub.