Skip Montanaro <skip.montan...@gmail.com> added the comment:
Just in case this would be useful to others, git bisect led me to this commit
as the source of the problem:
61d478c71c5341cdc54e6bfb4ace4252852fd972 is the first bad commit
commit 61d478c71c5341cdc54e6bfb4ace4252852fd972
Author: Christian Heimes <christ...@python.org>
Date: Sat Jan 27 15:51:38 2018 +0100
bpo-31399: Let OpenSSL verify hostname and IP address (#3462)
bpo-31399: Let OpenSSL verify hostname and IP
The ssl module now uses OpenSSL's X509_VERIFY_PARAM_set1_host() and
X509_VERIFY_PARAM_set1_ip() API to verify hostname and IP addresses.
* Remove match_hostname calls
* Check for libssl with set1_host, libssl must provide
X509_VERIFY_PARAM_set1_host()
* Add documentation for OpenSSL 1.0.2 requirement
* Don't support OpenSSL special mode with a leading dot, e.g.
".example.org" matches "www.example.org". It's not standard conform.
* Add hostname_checks_common_name
Signed-off-by: Christian Heimes <christ...@python.org>
:040000 040000 09f4c8a18941f926c1f79e2f07dfd7731edf74c2
798ae3fab880e3365c490d56935901a4c18fd3bd M Doc
:040000 040000 f35a1b4e2144050dfc4c7dbb02b7d92e3de1c2d0
7af4e4a8e82eafc6e7f2f4392c951213777f12c4 M Lib
:040000 040000 e287c27f4db61beae905c21b96666194bb930c13
59e6fc63d296f7fe3187ff0987a04c9999e2d1d0 M Misc
:040000 040000 95250f4c1009b5f10ec392c186908698d78f9cd3
160ebeb2c63d1ca305c7e37a0b555900b5084d20 M Modules
:040000 040000 8adc7f664a8eaa667f4540f537304d7f9de672d4
41ea621f5433077f6dd776f4c2c51f7a8e4cab0f M PC
:100644 100644 a6f4488cc99941abaa8b6fb7c53079b7cc292f9f
ba0a7624cfcd0129e73bc218510f398001514df8 M setup.py
----------
nosy: +skip.montanaro
_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue33099>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
