[Python-Dev] Enable Hostname and Certificate Chain Validation (original) (raw)

Antoine Pitrou solipsis at pitrou.net
Thu Jan 23 16:04:50 CET 2014


On Thu, 23 Jan 2014 06:02:18 +0000 Kristján Valur Jónsson <kristjan at ccpgames.com> wrote:

If not already possible, I suggest that we allow the use of a certificate validation callback (it isn't possible for 2.7, I just hacked in one yesterday to allow me to ignore out-date-failure for certificates.) Using this, it would be possible to e.g. emit warnings when certificiate failures occur, rather than deny connection outright.

That's a possible transition measure indeed.

Regards

Antoine.



More information about the Python-Dev mailing list