STINNER Victor added the comment:

> Do you modify the SSLContext object in your SNI callback? That's the wrong 
> way to do it. You have to create a SSLContext object for each certificate/key 
> pair at startup and then change the socket's context attribute.

Would it be possible to prevent bugs? For example, make SSLContext "read only" 
while the SNI callback is called? Or my question doesn't make sense? :-) I 
don't know well how OpenSSL works.

At least, we should warn users in the ssl documentation to mention such crash?

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue29470>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to