RHEL 8 introduces system-wide cryptographic policies.
When using 'FUTURE' mode, OpenSSL is prevented from accessing resources without a trusted entry in the CA store. Since 'curl' uses OpenSSL by default and python.org is not part of a default installation's CA store, the download attempts fail.
Initially, this can be fixed by just employing the --insecure flag offered by curl.
Provide a more graceful solution to the user.