CRL fetch SSL check fail

[oxlade39]

When the CRL fetch is performed I’m receiving an HTTPS SSL handshake failure error.

I think this is because the fetch is done by the urllib module and this doesn’t have the certificates (that I’ve registered with the validator. via the intermediates arg) they are required for the CA which is over HTTPS signed using the same certificate chain.

What’s the correct approach to this situation?