[issue31431] SSL: check_hostname should imply CERT_REQUIRED

2017-09-15 Thread Christian Heimes
Christian Heimes added the comment: New changeset e82c034496512139e9ea3f68ceda86c04bc7baab by Christian Heimes in branch 'master': bpo-31431: SSLContext.check_hostname auto-sets CERT_REQUIRED (#3531) https://github.com/python/cpython/commit/e82c034496512139e9ea3f68ceda86c04bc7baab --

[issue31431] SSL: check_hostname should imply CERT_REQUIRED

2017-09-15 Thread Christian Heimes
Changes by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue31431] SSL: check_hostname should imply CERT_REQUIRED

2017-09-12 Thread Christian Heimes
Changes by Christian Heimes : -- keywords: +patch pull_requests: +3528 stage: needs patch -> patch review ___ Python tracker ___ ___

[issue31431] SSL: check_hostname should imply CERT_REQUIRED

2017-09-12 Thread Christian Heimes
Changes by Christian Heimes : -- nosy: +alex, dstufft, janssen ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue31431] SSL: check_hostname should imply CERT_REQUIRED

2017-09-12 Thread Christian Heimes
New submission from Christian Heimes: Hostname verification makes not much sense without verifying the certificate chain first. At the moment one has to set verify_mode to CERT_REQUIRED first: >>> import ssl >>>