]> granicus.if.org Git - python/commit
projects / python / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 12b436e) | patch
bpo-37428: Don't set PHA verify flag on client side (GH-14421)
authorChristian Heimes <christian@python.org>
Mon, 1 Jul 2019 06:29:17 +0000 (08:29 +0200)
committerMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Mon, 1 Jul 2019 06:29:17 +0000 (23:29 -0700)
commitf0f5930ac88482ef896283db5be9b8d508d077db
tree1dbfd07ab81c76c959ac6b461093ac55d8b3bd84tree | snapshot
parent12b436e3b079fb3e3a7197c089df90a77e3bdd77commit | diff
bpo-37428: Don't set PHA verify flag on client side (GH-14421)

SSLContext.post_handshake_auth = True no longer sets
SSL_VERIFY_POST_HANDSHAKE verify flag for client connections. Although the
option is documented as ignored for clients, OpenSSL implicitly enables cert
chain validation when the flag is set.

Signed-off-by: Christian Heimes <christian@python.org>
https://bugs.python.org/issue37428
Lib/test/test_ssl.py diff | blob | history
Misc/NEWS.d/next/Library/2019-06-27-13-27-02.bpo-37428._wcwUd.rst [new file with mode: 0644] blob
Modules/_ssl.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.