Currently test_ssl.py only tests for empty or broken certificates. One can break certificate validation in _ssl.c and they still pass. The following patch should fix this. - Jonas
OK, good idea. I'll put it in. Bill On Thu, Jun 26, 2008 at 11:34 AM, Jonas Wagner <report@bugs.python.org> wrote: > > New submission from Jonas Wagner <veers@gmx.ch>: > > Currently test_ssl.py only tests for empty or broken certificates. One > can break certificate validation in _ssl.c and they still pass. > > The following patch should fix this. > > - Jonas > > ---------- > components: Tests > files: add_wrong_cert_test.diff > keywords: patch > messages: 68797 > nosy: janssen, jonas.wagner > severity: normal > status: open > title: ssl module - should test for a wrong cert > type: feature request > versions: Python 2.6 > Added file: http://bugs.python.org/file10745/add_wrong_cert_test.diff > > _______________________________________ > Python tracker <report@bugs.python.org> > <http://bugs.python.org/issue3212> > _______________________________________ >