[issue34440] Certificate verify failed (works fine in 3.6)

Lennart Grahl added the comment: Cheers! -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyt

[issue34440] Certificate verify failed (works fine in 3.6)

Christian Heimes added the comment: Python 3.6 is a little more forgiving than Python 3.7. Python 3.7 uses OpenSSL's hostname verification algorithms, which interpret the RFCs more strictly. You have to include a SAN field of type IP address. Matching against CN has been deprecated for more

[issue34440] Certificate verify failed (works fine in 3.6)

Lennart Grahl added the comment: Hi. I don't see why the certificate would not be valid for that address. Python 3.6 also accepts it without any modifications to the script. Output of openssl x509 -in cert.pem -noout -text Certificate: Data: Version: 3 (0x2) Serial Numb

[issue34440] Certificate verify failed (works fine in 3.6)

Christian Heimes added the comment: The exception message is: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: IP address mismatch, certificate is not valid for '127.0.0.1'. (_ssl.c:1045) The certificate is not valid for the URL. You are connection t

[issue34440] Certificate verify failed (works fine in 3.6)

New submission from Lennart Grahl : When running the attached script with the attached cert, Python 3.7 raises an exception (see https://paste.pound-python.org/show/VLr84Yn2Fnz6RSKEq3ui/). In Python 3.6, the certificate is being accepted. I don't see anything wrong with the self-signed certif