[issue43921] test_ssl fails on Windows buildbots

Change by Christian Heimes : -- pull_requests: +24293 pull_request: https://github.com/python/cpython/pull/25574 ___ Python tracker <https://bugs.python.org/issue43

[issue37322] test_ssl: test_pha_required_nocert() emits a ResourceWarning

Change by Christian Heimes : -- pull_requests: +24292 pull_request: https://github.com/python/cpython/pull/25573 ___ Python tracker <https://bugs.python.org/issue37

[issue37322] test_ssl: test_pha_required_nocert() emits a ResourceWarning

Change by Christian Heimes : -- pull_requests: +24291 pull_request: https://github.com/python/cpython/pull/25572 ___ Python tracker <https://bugs.python.org/issue37

[issue41282] Deprecate and remove distutils

Christian Heimes added the comment: New changeset a460ab3134cd5cf3932c2125aec012851268f0cc by Christian Heimes in branch 'master': bpo-41282: Consistent message and filter warning in setup.py (GH-25571) https://github.com/python/cpython/commit/a460ab3134cd5cf3932c2125aec012851268f0cc

[issue41282] Deprecate and remove distutils

Change by Christian Heimes : -- pull_requests: +24290 pull_request: https://github.com/python/cpython/pull/25571 ___ Python tracker <https://bugs.python.org/issue41

[issue37322] test_ssl: test_pha_required_nocert() emits a ResourceWarning

Christian Heimes added the comment: New changeset c8666cfa7cdc48915a14cd16095a69029720736a by Christian Heimes in branch 'master': bpo-37322: Fix ResourceWarning and exception handling in test (GH-25553) https://github.com/python/cpython/commit/c8666cfa7cdc48915a14cd16095a69029720736a

[issue31870] add timeout parameter for get_server_certificate in ssl.py

Christian Heimes added the comment: New changeset f05c2aed7e25087122613b51f152919c79641f66 by Christian Heimes in branch 'master': bpo-31870: Fix test_get_server_certificate_timeout on Windows (GH-25570) https://github.com/python/cpython/commit/f05c2aed7e25087122613b51f152919c79641f66

[issue31870] add timeout parameter for get_server_certificate in ssl.py

Change by Christian Heimes : -- pull_requests: +24289 pull_request: https://github.com/python/cpython/pull/25570 ___ Python tracker <https://bugs.python.org/issue31

[issue31870] add timeout parameter for get_server_certificate in ssl.py

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: +Python 3.10 -Python 3.8 ___ Python tracker <https://bugs.python.or

[issue43921] test_ssl fails on Windows buildbots

Christian Heimes added the comment: Another TLS 1.3 client cert auth test is flaky, too. https://buildbot.python.org/all/#/builders/577/builds/14/steps/4/logs/stdio == FAIL: test_pha_required_nocert

[issue43921] test_ssl fails on Windows buildbots

Christian Heimes added the comment: New changeset e047239eafefe8b19725efffe7756443495cf78b by Christian Heimes in branch 'master': bpo-43921: ignore failing test_wrong_cert_tls13 on Windows (GH-25561) https://github.com/python/cpython/commit/e047239eafefe8b19725efffe7756443495cf78b

[issue43921] test_ssl fails on Windows buildbots

Change by Christian Heimes : -- keywords: +patch pull_requests: +24280 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25561 ___ Python tracker <https://bugs.python.org/issu

[issue35114] ssl.RAND_status docs describe it as returning True/False; actually returns 1/0

Christian Heimes added the comment: New changeset 7d37b86ad48368cf93440ca220b758696730d0e5 by Zackery Spytz in branch 'master': bpo-35114: Make ssl.RAND_status() return a bool (GH-20063) https://github.com/python/cpython/commit/7d37b86ad48368cf93440ca220b758696730d0e5 -- nosy

[issue35114] ssl.RAND_status docs describe it as returning True/False; actually returns 1/0

Christian Heimes added the comment: Thanks Zackery! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: +Python 3.10 ___ Python tracker <https://bugs.python.or

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

Christian Heimes added the comment: New changeset 82b6c0909aae423d9c8f4ff7d0e8df16106dbe28 by Christian Heimes in branch '3.8': [3.8] bpo-43920: Make load_verify_locations(cadata) error message consistent (GH-25554) (GH-25556) https://github.com/python/cpython/commit

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

Christian Heimes added the comment: New changeset e259a77f21bdfc7d4195913b379cbd6daee45d0d by Christian Heimes in branch '3.9': [3.9] bpo-43920: Make load_verify_locations(cadata) error message consistent (GH-25554) (GH-2) https://github.com/python/cpython/commit

[issue38820] Make Python compatible with OpenSSL 3.0.0

Christian Heimes added the comment: New changeset dcf658157df11de198a98e3db2a3050dd4f6b973 by Christian Heimes in branch 'master': bpo-38820: Test with OpenSSL 3.0.0-alpha15 (GH-25537) https://github.com/python/cpython/commit/dcf658157df11de198a98e3db2a3050dd4f6b973

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

Change by Christian Heimes : -- pull_requests: +24276 pull_request: https://github.com/python/cpython/pull/25556 ___ Python tracker <https://bugs.python.org/issue43

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

Change by Christian Heimes : -- pull_requests: +24275 pull_request: https://github.com/python/cpython/pull/2 ___ Python tracker <https://bugs.python.org/issue43

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

Christian Heimes added the comment: New changeset b9ad88be0304136c3fe5959c65a5d2c75490cd80 by Christian Heimes in branch 'master': bpo-43920: Make load_verify_locations(cadata) error message consistent (GH-25554) https://github.com/python/cpython/commit

[issue38820] Make Python compatible with OpenSSL 3.0.0

Change by Christian Heimes : -- dependencies: +OpenSSL 3.0.0: handle empty cadata consistently ___ Python tracker <https://bugs.python.org/issue38820> ___ ___

[issue43921] test_ssl fails on Windows buildbots

Change by Christian Heimes : -- nosy: +steve.dower ___ Python tracker <https://bugs.python.org/issue43921> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

Change by Christian Heimes : -- keywords: +patch pull_requests: +24274 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25554 ___ Python tracker <https://bugs.python.org/issu

[issue43920] OpenSSL 3.0.0: handle empty cadata consistently

New submission from Christian Heimes : OpenSSL 3.0.0-alpha15 handles empty data input to d2i_X509_bio() and PEM_read_bio_X509() differently. This causes cadata test for invalid data to fail with inconsistent error message. Let's handle 0 result case more consistent and raise an error message

[issue37322] test_ssl: test_pha_required_nocert() emits a ResourceWarning

Change by Christian Heimes : -- pull_requests: +24273 pull_request: https://github.com/python/cpython/pull/25553 ___ Python tracker <https://bugs.python.org/issue37

[issue43885] ResourceWarning: unclosed test_pha_required_nocert

Christian Heimes added the comment: Thanks Victor, let's handle the issue in bpo-37322 instead. -- resolution: -> duplicate stage: patch review -> resolved status: open -> closed superseder: -> test_ssl: test_pha_required_nocert() emits a Res

[issue37322] test_ssl: test_pha_required_nocert() emits a ResourceWarning

Christian Heimes added the comment: I wasn't aware of this bpo and created bpo-43885 a couple of days ago. tl;dr I do not understand test changes in fb7e7505ed1337bf40fa7b8b68317d1e86675a86 at all. I think that these changes are broken, too. ThreadedEchoServer and ConnectionHandler must

[issue38820] Make Python compatible with OpenSSL 3.0.0

Change by Christian Heimes : -- pull_requests: +24256 pull_request: https://github.com/python/cpython/pull/25537 ___ Python tracker <https://bugs.python.org/issue38

[issue43902] ssl module: add getter for SSL_CTX* and SSL*

Christian Heimes added the comment: Funny, I was looking into the same issue with CDLL(). :) The trick with ssl._ssl.__file__ may even break if users change sys.setdlopenflag() from RTLD_GLOBAL to RTLD_LOCAL. Static linking will also influence which symbols are available. Python

[issue43902] ssl module: add getter for SSL_CTX* and SSL*

Christian Heimes added the comment: I don't want to import ctypes from the ssl module code. PyCapsule could be a solution for the problem. Users would have to call PyCapsule_Import("_ssl.capsule") and PyCapsule_GetPointer() to access a struct with additional methods. It's a bit

[issue43902] ssl module: add getter for SSL_CTX* and SSL*

New submission from Christian Heimes : Python's ssl module exposes a limited and opinionated set of knobs to tune OpenSSL's behavior. Each new setter, getter, or function must be carefully design, tested, and documented. For each feature OpenSSL's C API must be converted into a Pythonic

[issue39194] asyncio.open_connection returns a closed client when server fails to authenticate client certificate

Christian Heimes added the comment: I'm unassigning myself. This seems to be an asyncio-specific behavior. -- assignee: christian.heimes -> components: -SSL versions: +Python 3.10, Python 3.11, Python 3.9 -Python 3.6, Python 3.7 ___ Pyt

[issue31727] FTP_TLS errors when use certain subcommands

Christian Heimes added the comment: I'm removing the SSL component. The issue here seems to be caused by the way how ftplib use the ssl module, not by a problem in the ssl module itself. -- components: +Library (Lib) -SSL, Windows versions: +Python 3.10, Python 3.9 -Python 3.6

[issue40306] Enhancement request for SSLContext - flag to handle trailing dot in hostname

Christian Heimes added the comment: OpenSSL feature request: https://github.com/openssl/openssl/issues/11560 -- versions: +Python 3.10 -Python 3.7 ___ Python tracker <https://bugs.python.org/issue40

[issue43799] OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1

Christian Heimes added the comment: New changeset 3309113d6131e4bbac570c4f54175ecca02d025a by Christian Heimes in branch 'master': bpo-43799: Also define SSLv3_method() (GH-25481) https://github.com/python/cpython/commit/3309113d6131e4bbac570c4f54175ecca02d025a

[issue33025] urlencode produces bad output from ssl.CERT_NONE and friends that chokes decoders

Christian Heimes added the comment: I guess so. We turned CERT_NONE into an IntFlag enum many years ago. urlencode() uses repr to convert integer enums. -- nosy: +christian.heimes ___ Python tracker <https://bugs.python.org/issue33

[issue43799] OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1

Change by Christian Heimes : -- pull_requests: +24206 pull_request: https://github.com/python/cpython/pull/25481 ___ Python tracker <https://bugs.python.org/issue43

[issue30898] SSL cert failure running make test during Python 3.6 install

Christian Heimes added the comment: I'm closing the ticket as out of date. Please feel free to reopen the ticket if you can reproduce the problem with a more recent version of Python. -- nosy: +christian.heimes stage: -> resolved status: pending ->

[issue42854] OpenSSL 1.1.1: use SSL_write_ex() and SSL_read_ex()

Christian Heimes added the comment: Ethan, what's your platform and OpenSSL version? -- resolution: fixed -> status: closed -> open ___ Python tracker <https://bugs.python.org/i

[issue32951] Prohibit direct instantiation of SSLSocket and SSLObject

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue34391] test_ftplib is failing with TLS 1.3

Christian Heimes added the comment: I don't think there is anything left to do. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue43811] Run GHA CI with multiple OpenSSL versions

Change by Christian Heimes : -- dependencies: -Run GHA CI with multiple OpenSSL versions resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue42166] corrupted size vs. prev_size

Christian Heimes added the comment: Python 3.7 no longer receives regular updates. Please feel free to reopen the bug if you can reproduce the issue with a more recent Python and OpenSSL version. -- resolution: -> out of date stage: -> resolved status: open -&g

[issue37355] SSLSocket.read does a GIL round-trip for every 16KB TLS record

Christian Heimes added the comment: Josh, could you please rebase your branch and create a pull request? The PR process will verify that you have submitted a CLA. -- ___ Python tracker <https://bugs.python.org/issue37

[issue41556] hostname verification fails if hostname starts with literal IPv4

Christian Heimes added the comment: There is no progress on the OpenSSL bug yet. -- versions: +Python 3.10, Python 3.9 ___ Python tracker <https://bugs.python.org/issue41

[issue34028] Python 3.7.0 wont compile with SSL Support 1.1.0 > alledged missing X509_VERIFY_PARAM_set1_host() support

Christian Heimes added the comment: Python 3.10 contains various improvements that make it easier to compile and link Python with a custom OpenSSL installation. You can find more information in ticket bpo-43466. -- resolution: -> fixed stage: -> resolved status: open -&g

[issue37666] urllib.requests.urlopen: deprecate cafile=None, capath=None, cadefault=False

Change by Christian Heimes : -- assignee: christian.heimes -> components: -SSL title: urllib.requests.urlopen doesn't support cadata= -> urllib.requests.urlopen: deprecate cafile=None, capath=None, cadefault=False versions: +Python 3.10 -Python 3.8, Pyth

[issue37120] Provide knobs to disable session ticket generation on TLS 1.3

Change by Christian Heimes : -- stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.org/issue37120> ___ ___ Pyth

[issue35422] misleading error message from ssl.get_server_certificate() when bad port

Christian Heimes added the comment: There is no easy fix for that. The TLS handskae is performed by OpenSSL internally. You could open a feature request with OpenSSL and ask them to implement better error detection and reporting. -- resolution: -> wont fix stage: -> re

[issue36137] SSL verification fails for some sites inside windows docker container

Christian Heimes added the comment: I'm closing this issue as duplicate of #36137. There is no need to keep two issues open for the same problem. -- resolution: -> duplicate stage: -> resolved status: open -> closed superseder: -> SSL verification fails for some

[issue34670] Add set_post_handshake_auth for TLS 1.3

Christian Heimes added the comment: I don't think is anything left to do here. PHA has been supported for a while and I haven't seen any problems. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Pytho

[issue32813] SSL shared_ciphers implementation wrong - returns configured but not shared ciphers

Christian Heimes added the comment: 3.10 now supports only OpenSSL versions that return the correct value. Older Python versions may return wrong value when they are linked with OpenSSL 1.1.0 or 1.0.2. -- resolution: -> third party stage: -> resolved status: open -&g

[issue43880] 3.10 SSL module deprecations

Christian Heimes added the comment: I'm leaving the issue open as a reminder to improve whatsnew documentation. -- priority: high -> normal ___ Python tracker <https://bugs.python.org/issu

[issue40849] Expose X509_V_FLAG_PARTIAL_CHAIN ssl flag

Change by Christian Heimes : -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.org/issue40849> ___ ___

[issue43885] ResourceWarning: unclosed test_pha_required_nocert

New submission from Christian Heimes : bpo-35926 and fb7e7505ed1337bf40fa7b8b68317d1e86675a86 introduced code that is triggered resource errors and unhandled exceptions. It has been bothering me for a while but I could never pin point the issue. Victor's and Hai's commits e80697d687b6

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

Christian Heimes added the comment: New changeset d37b74f341c5a215e2fdd5eb4f8c0182f327635c by Christian Heimes in branch 'master': bpo-43669: More test_ssl cleanups (GH-25470) https://github.com/python/cpython/commit/d37b74f341c5a215e2fdd5eb4f8c0182f327635c

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

Change by Christian Heimes : -- pull_requests: +24195 pull_request: https://github.com/python/cpython/pull/25470 ___ Python tracker <https://bugs.python.org/issue43

[issue43880] 3.10 SSL module deprecations

Christian Heimes added the comment: New changeset 2875c603b2a7691b55c2046aca54831c91efda8e by Christian Heimes in branch 'master': bpo-43880: Show DeprecationWarnings for deprecated ssl module features (GH-25455) https://github.com/python/cpython/commit

[issue42854] OpenSSL 1.1.1: use SSL_write_ex() and SSL_read_ex()

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue42854] OpenSSL 1.1.1: use SSL_write_ex() and SSL_read_ex()

Christian Heimes added the comment: New changeset 89d1550d14ba689af12eeb726e4ff8ce73cee7e1 by Christian Heimes in branch 'master': bpo-42854: Use SSL_read/write_ex() (GH-25468) https://github.com/python/cpython/commit/89d1550d14ba689af12eeb726e4ff8ce73cee7e1

[issue39298] add BLAKE3 to hashlib

Christian Heimes added the comment: 3.10 feature freeze is in two weeks (May 3). I don't feel comfortable to add so much new C code shortly before beta 1. If I understandly correctly the code is new and hasn't been published on PyPI yet. I also don't have much time to properly review

[issue42853] `OverflowError: signed integer is greater than maximum` in ssl.py for files larger than 2GB

Christian Heimes added the comment: Python 3.10 will use SSL_write_ex() and SSL_read_ex(), which support > 2 GB data. -- versions: -Python 3.10 ___ Python tracker <https://bugs.python.org/issu

[issue42854] OpenSSL 1.1.1: use SSL_write_ex() and SSL_read_ex()

Christian Heimes added the comment: SSL_write_ex() and SSL_read_ex() solve two issues: * bpo-42853: SSLSocket no longer raises overflow error when sending or receiving more than 2 GB of data * bpo-31711: empty send(b"") no longer fails with protocol violation

[issue31711] ssl.SSLSocket.send(b"") fails

Christian Heimes added the comment: Thanks to PEP 644 the issue will be fixed in 3.10 by using SSL_read_ex and SSL_write_ex() functions. I couldn't use the functions earlier because Python had to support older OpenSSL versions and LibreSSL. See https://github.com/python/cpython/pull/25468

[issue42854] OpenSSL 1.1.1: use SSL_write_ex() and SSL_read_ex()

Change by Christian Heimes : -- keywords: +patch pull_requests: +24193 stage: needs patch -> patch review pull_request: https://github.com/python/cpython/pull/25468 ___ Python tracker <https://bugs.python.org/issu

[issue18233] SSLSocket.getpeercertchain()

Change by Christian Heimes : -- pull_requests: +24191 pull_request: https://github.com/python/cpython/pull/25467 ___ Python tracker <https://bugs.python.org/issue18

[issue36076] ssl.get_server_certificate should use SNI

Christian Heimes added the comment: Thanks! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: +Python 3.10 -Python 3.7 ___ Python tracker <https://bugs.python.or

[issue43641] Update `ssl.PROTOCOL_TLSv1_2` docs since it is not the newest TLS version

Christian Heimes added the comment: Thanks! -- nosy: +christian.heimes resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue43362] Bad free in py_sha3_new_impl function

Christian Heimes added the comment: The issue affected Python 3.10a1 to latest alpha. 3.9 and earlier are not affected. Thanks! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: -Python 3.8, P

[issue43362] Bad free in py_sha3_new_impl function

Christian Heimes added the comment: New changeset aa6da32edc3c6ddfda5e849561e20273b8d82771 by Christian Heimes in branch 'master': bpo-43362: Fix invalid free and return check in _sha3 module (GH-25463) https://github.com/python/cpython/commit/aa6da32edc3c6ddfda5e849561e20273b8d82771

[issue43362] Bad free in py_sha3_new_impl function

Change by Christian Heimes : -- pull_requests: +24189 pull_request: https://github.com/python/cpython/pull/25463 ___ Python tracker <https://bugs.python.org/issue43

[issue43362] Bad free in py_sha3_new_impl function

Christian Heimes added the comment: Excellent finding! The issue was introduced in commit 93d50a6a8d0c5d332c11aef267e66573a09765ac as part of bpo-1635741 -- ___ Python tracker <https://bugs.python.org/issue43

[issue43362] Bad free in py_sha3_new_impl function

Change by Christian Heimes : -- assignee: -> christian.heimes nosy: +christian.heimes type: crash -> behavior versions: +Python 3.8, Python 3.9 ___ Python tracker <https://bugs.python.org/i

[issue30226] Modernize make_ssl_certs

Change by Christian Heimes : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue37550] SSL Pip Error

Change by Christian Heimes : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue40482] _hashlib: register Python names as OpenSSL aliases

Christian Heimes added the comment: I decided against the approach. -- resolution: -> rejected stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue40079] NULL pointer deref on error path in _ssl debughelpers.c

Christian Heimes added the comment: The issue has been fixed by fbf94af2af3c09493481b8559b84f6e9f0628c37 in on 2020-Jun-21. -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue34271] Please support logging of SSL master secret by env variable SSLKEYLOGFILE

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue34001] LibreSSL does not tolerate setting minimum_version greater than maximum_version

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue36868] New behavior of OpenSSL hostname verification not exposed, incorrectly documented

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue28453] SSLObject.selected_alpn_protocol() not documented

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue36866] Certificate verification errors in urllib.request become URLError

Change by Christian Heimes : -- assignee: christian.heimes -> components: -SSL nosy: -christian.heimes versions: +Python 3.10 -Python 3.7 ___ Python tracker <https://bugs.python.org/issu

[issue31453] Debian Sid/Buster: Cannot enable TLS 1.0/1.1 with PROTOCOL_TLS

Christian Heimes added the comment: Python 2.7 is out of supports. 3.6 will reach end of security support soon. More recent Python versions have TLS 1.0 and 1.1 deprecated and contain workarounds for tests. -- resolution: -> out of date stage: patch review -> resolved status

[issue34669] test_ssl fails if SSLv2 is enabled

Christian Heimes added the comment: We are no longer testing with any OpenSSL version that has SSL 2.0 enabled or even available. -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracke

[issue33025] urlencode produces bad output from ssl.CERT_NONE and friends that chokes decoders

Change by Christian Heimes : -- components: -SSL nosy: -christian.heimes versions: +Python 3.10, Python 3.8, Python 3.9 -Python 3.6, Python 3.7 ___ Python tracker <https://bugs.python.org/issue33

[issue33808] ssl.get_server_certificate fails with openssl 1.1.0 but works with 1.0.2g for self-signed certificate

Christian Heimes added the comment: The issue has been stale for over two years. Closing. -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue35888] ssl module - could not get the server certificate w/o completed handshake

Christian Heimes added the comment: You are correct. The ssl.get_server_certificate() helper function performs a full handshake and then returns the certificate. It's technically possible to get the cert chain from the ServerHello message, but Python does not provide an API for that. I

[issue32219] SSLWantWriteError being raised by blocking SSL socket

Christian Heimes added the comment: Nathaniel, is this still an issue with recent OpenSSL and Python versions? -- status: open -> pending ___ Python tracker <https://bugs.python.org/issu

[issue30141] If you forget to call do_handshake, then everything seems to work but hostname checking is disabled

Christian Heimes added the comment: 3.6 will be out of support very soon. I'm closing this old bug as wontfix. Thanks for your investigation! :) -- resolution: -> wont fix status: open -> closed ___ Python tracker <https://bugs.p

[issue39344] Getting error while importing ssl " import _ssl # if we can't import it, let the error propagate ImportError: DLL load failed while importing _ssl: The specified module could not be found

Change by Christian Heimes : -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.org/issue39344> ___ ___

[issue35136] test_ssl fails in AMD64 FreeBSD CURRENT Shared 3.6 buildbot, OpenSSL 1.1.1a

Christian Heimes added the comment: I'm closing the issue as outdated. -- resolution: -> out of date stage: -> resolved status: open -> closed type: -> behavior ___ Python tracker <https://bugs.python

[issue33023] Unable to copy ssl.SSLContext

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue23239] SSL match_hostname does not accept IP Address

Christian Heimes added the comment: Python 2 is out of support. Python 3 can verify IP addresses in certificates correctly. -- resolution: -> out of date stage: needs patch -> resolved status: open -> closed ___ Python tracke

[issue34078] Broken CRL functionality in ssl.py

Christian Heimes added the comment: No response in over two years. I'm closing the issue. Please feel free to reopen the issue with more information. -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Pytho

[issue41195] Interface to OpenSSL's security level

Christian Heimes added the comment: The getter is available in 3.10. Thanks for your contribution! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue38815] test_ssl: test_min_max_version() fails on FreeBSD and Fedora

Christian Heimes added the comment: I haven't seen the problem in a while. -- resolution: -> fixed stage: commit review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue42952] Incorrect handling of EC_KEY_new_by_curve_name() in the _ssl module

Christian Heimes added the comment: I have removed the code from master. Do you want to remove it from 3.9 and 3.8 or should we just ignore the dead code? -- resolution: -> fixed status: open -> pending ___ Python tracker

[issue43000] All SSL requests fail with WRONG_VERSION_NUMBER when a packet sniffer is open

Christian Heimes added the comment: The op hasn't replied in three months. I'm closing the issue. Please feel free to reopen the issue with more information. -- resolution: -> out of date stage: -> resolved status: open -> closed type: crash -&

[issue42854] OpenSSL 1.1.1: use SSL_write_ex() and SSL_read_ex()

Christian Heimes added the comment: 3.10 branch now requires OpenSSL 1.1.1. This should be easy to implement. -- keywords: +easy (C) priority: normal -> high stage: -> needs patch ___ Python tracker <https://bugs.python.org/i

<    6   7   8   9   10   11   12   13   14   15   >