Re: Certificate validation with HTTPSConnection

2010-10-27 Thread Aahz
In article <4ca3a46b.4080...@animats.com>, John Nagle wrote: > >http://bugs.python.org/issue1589 >(2010: Developer "Bill Jansen" in denial, others disagree. >Currently being debated. See bug tracker.) While I agree with you that SSL ended up being rather a cluster, I think that using scare quot

Re: Certificate validation with HTTPSConnection

2010-09-29 Thread John Nagle
On 9/29/2010 3:51 PM, Antoine Pitrou wrote: On Wed, 29 Sep 2010 13:41:15 -0700 John Nagle wrote: The really stupid thing about the current SSL module is that it accepts a file of root certificates as a parameter, but ignores it. That's not true. You have to pass CERT_OPTIONAL or CERT_REQUIRE

Re: Certificate validation with HTTPSConnection

2010-09-29 Thread Antoine Pitrou
On Wed, 29 Sep 2010 13:41:15 -0700 John Nagle wrote: > > The really stupid thing about the current SSL module is that it > accepts a file of root certificates as a parameter, but ignores it. That's not true. You have to pass CERT_OPTIONAL or CERT_REQUIRED as a parameter (CERT_NONE is though). R

Re: Certificate validation with HTTPSConnection

2010-09-29 Thread Ned Deily
In article <4ca3a46b.4080...@animats.com>, John Nagle wrote: > We've been through this. Too many times. > > http://bugs.python.org/issue1114345 > (2005: Broken in Python 2.2, eventually fixed) > > http://www.justinsamuel.com/2008/12/25/the-importance-of-validating-ssl-certif > icates/ > (

Re: Certificate validation with HTTPSConnection

2010-09-29 Thread John Nagle
On 9/29/2010 1:18 PM, Ned Deily wrote: In article, Velko Ivanov wrote: I've always wandered why HTTPSConnection does not validate certificates? It is fairly simple to use the SSL socket's validation: [...] Perhaps you can write up your example as a documentation patch to the http.client d

Re: Certificate validation with HTTPSConnection

2010-09-29 Thread Ned Deily
In article , Velko Ivanov wrote: > I've always wandered why HTTPSConnection does not validate > certificates? > > It is fairly simple to use the SSL socket's validation: [...] Perhaps you can write up your example as a documentation patch to the http.client documentation page and submit it t

Certificate validation with HTTPSConnection

2010-09-29 Thread Velko Ivanov
Hello, I've always wandered why HTTPSConnection does not validate certificates? It is fairly simple to use the SSL socket's validation: > class HTTPSConnection(HTTPConnection): > """This class allows communication via SSL. > It is a copy of the http.client.HTTPSConnection with added certifi