Issue 20050: distutils should check PyPI certs when connecting to it (original) (raw)
Issue20050
process
| Status: | closed | Resolution: | fixed |
|---|---|---|---|
| Dependencies: | Superseder: | ||
| Assigned To: | Nosy List: | Giovanni.Bajo, alexis, benjamin.peterson, christian.heimes, cvrebert, dstufft, eric.araujo, georg.brandl, jwilk, pitrou, tiwilliam | |
| Priority: | high | Keywords: |
Created on 2013-12-22 00:52 by pitrou, last changed 2022-04-11 14:57 by admin. This issue is now closed.
| Messages (2) | ||
|---|---|---|
| msg206800 - (view) | Author: Antoine Pitrou (pitrou) *  |
Date: 2013-12-22 00:52 |
| Spun off from #12226: distutils now uses HTTPS by default to connect PyPI, but certs aren't checked at all. | ||
| msg275222 - (view) | Author: Christian Heimes (christian.heimes) * |
Date: 2016-09-08 23:59 |
| distutils uses urlopen() which uses ssl.create_default_context() to create a SSLContext with cert validation and hostname verification enabled. |
| History | |||
|---|---|---|---|
| Date | User | Action | Args |
| 2022-04-11 14:57:55 | admin | set | github: 64249 |
| 2016-09-08 23:59:45 | christian.heimes | set | status: open -> closedresolution: fixedmessages: + |
| 2014-04-25 22:22:37 | tiwilliam | set | nosy: + tiwilliam |
| 2014-01-02 12:41:40 | jwilk | set | nosy: + jwilk |
| 2013-12-27 18:16:16 | cvrebert | set | nosy: + cvrebert |
| 2013-12-22 00:52:05 | pitrou | create |