Staging
v0.5.0
https://github.com/python/cpython
Revision 61d478c71c5341cdc54e6bfb4ace4252852fd972 authored by Christian Heimes on 27 January 2018, 14:51:38 UTC, committed by GitHub on 27 January 2018, 14:51:38 UTC
bpo-31399: Let OpenSSL verify hostname and IP

The ssl module now uses OpenSSL's X509_VERIFY_PARAM_set1_host() and
X509_VERIFY_PARAM_set1_ip() API to verify hostname and IP addresses.

* Remove match_hostname calls
* Check for libssl with set1_host, libssl must provide X509_VERIFY_PARAM_set1_host()
* Add documentation for OpenSSL 1.0.2 requirement
* Don't support OpenSSL special mode with a leading dot, e.g. ".example.org" matches "www.example.org". It's not standard conform.
* Add hostname_checks_common_name

Signed-off-by: Christian Heimes <christian@python.org>
1 parent 746cc75
History
Tip revision: 61d478c71c5341cdc54e6bfb4ace4252852fd972 authored by Christian Heimes on 27 January 2018, 14:51:38 UTC
bpo-31399: Let OpenSSL verify hostname and IP address (#3462)
Tip revision: 61d478c
File Mode Size
.github
Doc
Grammar
Include
Lib
Mac
Misc
Modules
Objects
PC
PCbuild
Parser
Programs
Python
Tools
m4
.gitattributes -rw-r--r-- 772 bytes
.gitignore -rw-r--r-- 1.5 KB
.hgeol -rw-r--r-- 1.0 KB
.hgignore -rw-r--r-- 1.3 KB
.hgtags -rw-r--r-- 8.7 KB
.travis.yml -rw-r--r-- 5.3 KB
LICENSE -rw-r--r-- 12.5 KB
Makefile.pre.in -rw-r--r-- 60.9 KB
README.rst -rw-r--r-- 9.1 KB
aclocal.m4 -rw-r--r-- 13.1 KB
config.guess -rwxr-xr-x 43.2 KB
config.sub -rwxr-xr-x 35.7 KB
configure -rwxr-xr-x 480.0 KB
configure.ac -rw-r--r-- 158.0 KB
install-sh -rwxr-xr-x 7.0 KB
pyconfig.h.in -rw-r--r-- 41.5 KB
setup.py -rw-r--r-- 99.3 KB

README.rst

back to top