Christian Heimes [Sat, 23 Nov 2013 12:56:58 +0000 (13:56 +0100)]
Issue #19292: Add SSLContext.load_default_certs() to load default root CA
certificates from default stores or system stores. By default the method
loads CA certs for authentication of server certs.
Christian Heimes [Sat, 23 Nov 2013 10:24:32 +0000 (11:24 +0100)]
Issue #8813: X509_VERIFY_PARAM is only available on OpenSSL 0.9.8+
The patch removes the verify_flags feature on Mac OS X 10.4 with OpenSSL 0.9.7l 28 Sep 2006.
Nick Coghlan [Sat, 23 Nov 2013 01:13:36 +0000 (11:13 +1000)]
Close #7475: Restore binary & text transform codecs
The codecs themselves were restored in Python 3.2, this
completes the restoration by adding back the convenience
aliases.
These aliases were originally left out due to confusing
errors when attempting to use them with the text encoding
specific convenience methods. Python 3.4 includes several
improvements to those errors, thus permitting the aliases
to be restored as well.
Brett Cannon [Fri, 22 Nov 2013 19:38:09 +0000 (14:38 -0500)]
Issue #18864: Don't try and use unittest as a testing module for
built-in loading; leads to a reload scenario where attributes get set
which are wrong after the test.
Nick Coghlan [Fri, 22 Nov 2013 12:39:36 +0000 (22:39 +1000)]
Issue #19619: Blacklist non-text codecs in method API
str.encode, bytes.decode and bytearray.decode now use an
internal API to throw LookupError for known non-text encodings,
rather than attempting the encoding or decoding operation and
then throwing a TypeError for an unexpected output type.
The latter mechanism remains in place for third party non-text
encodings.
Ned Deily [Fri, 22 Nov 2013 07:01:59 +0000 (23:01 -0800)]
Issue #19553: PEP 453 - "make install" and "make altinstall" now install or
upgrade pip by default, using the bundled pip provided by the new ensurepip
module. A new configure option, --with-ensurepip[=upgrade|install|no], is
available to override the default ensurepip "--upgrade" option. The option
can also be set with "make [alt]install ENSUREPIP=[upgrade|install\no]".
Ned Deily [Fri, 22 Nov 2013 06:42:25 +0000 (22:42 -0800)]
Issue #19649: On OS X, the same set of file names are now installed
in bin directories for all configurations: non-framework vs framework,
and single arch vs universal builds. pythonx.y-32 is now always
installed for 64-bit/32-bit universal builds. The obsolete and
undocumented pythonw* symlinks are no longer installed anywhere.
Christian Heimes [Fri, 22 Nov 2013 00:51:30 +0000 (01:51 +0100)]
Issue #17134: Finalize interface to Windows' certificate store. Cert and
CRL enumeration are now two functions. enum_certificates() also returns
purpose flags as set of OIDs.
Christian Heimes [Fri, 22 Nov 2013 00:22:47 +0000 (01:22 +0100)]
Issue #19681: Apply a quick and minimal band-aid.
The flaky buildbots make it hard to detect real issue. This is just a temporary fix until we agree
on a permanent solution.
Christian Heimes [Thu, 21 Nov 2013 22:56:13 +0000 (23:56 +0100)]
Issue #8813: Add SSLContext.verify_flags to change the verification flags
of the context in order to enable certification revocation list (CRL)
checks or strict X509 rules.
Victor Stinner [Thu, 21 Nov 2013 11:29:51 +0000 (12:29 +0100)]
Close #19568: Fix bytearray_setslice_linear(), fix handling of
PyByteArray_Resize() failure: leave the bytearray object in an consistent state.
If growth < 0, handling the memory allocation failure is tricky here because
the bytearray object has already been modified. If lo != 0, the operation is
completed, but a MemoryError is still raised and the memory block is not
shrinked. If lo == 0, the bytearray is restored in its previous state and a
MemoryError is raised.