[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-09-08 Thread Christian Heimes
Changes by Christian Heimes : -- resolution: -> fixed stage: commit review -> resolved status: open -> closed ___ Python tracker ___

[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-09-06 Thread Christian Heimes
Changes by Christian Heimes : -- stage: test needed -> commit review ___ Python tracker ___

[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-09-06 Thread Roundup Robot
Roundup Robot added the comment: New changeset 9bbf0b31da48 by Christian Heimes in branch '3.5': Issue #27691: Fix ssl module's parsing of GEN_RID subject alternative name fields in X.509 certs. https://hg.python.org/cpython/rev/9bbf0b31da48 New changeset 2b9af57af3e4 by Christian Heimes in

[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-09-01 Thread Christian Heimes
Christian Heimes added the comment: A GEN_RID is an OID plus some opaque data. It's up to an application to understand an OID and interpret its data. The value of a GEN_RID can be as simple as an int or UTF-8 strings or as complex as a nested ASN.1 struct for Kerberos principals. I have

[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-09-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: I can't comment on this, as I don't even know what a "registered id" is, sorry :-/ -- ___ Python tracker ___

[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-08-20 Thread Christian Heimes
Christian Heimes added the comment: ping -- nosy: +Lukasa, haypo type: behavior -> security ___ Python tracker ___

[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-08-05 Thread Christian Heimes
Changes by Christian Heimes : -- keywords: +patch Added file: http://bugs.python.org/file44018/0001-Fix-handling-of-GEN_RID-in-X.509-subjectAltName-fiel.patch ___ Python tracker

[issue27691] X509 cert with GEN_RID subject alt name causes SytemError

2016-08-05 Thread Christian Heimes
New submission from Christian Heimes: A X509 cert with a registered id general name in subject alternative name causes a SystemError: error return without exception set. This prevents host name validation of certs with a registered id. >>> import _ssl >>> _ssl._test_decode_cert('rid.pem')