[issue23928] SSL wiki page, host name matching, CN and SAN

2015-04-13 Thread Jeffrey Walton
New submission from Jeffrey Walton: The Python wiki page on SSL states (https://wiki.python.org/moin/SSL): To validate that a certificate matches requested site, you need to check commonName field in the subject of the certificate. I don't think its quite correct. Both the IETF

[issue23928] SSL wiki page, host name matching, CN and SAN

2015-04-13 Thread Antoine Pitrou
Antoine Pitrou added the comment: Thanks for the report; your remarks are obviously true. Unfortunately, the wiki is community-maintained, there's not much point in reporting bugs here about it. That page's contents look very outdated, by the way. The official documentation for the ssl module

[issue23928] SSL wiki page, host name matching, CN and SAN

2015-04-13 Thread Antoine Pitrou
Antoine Pitrou added the comment: I'm closing this issue since it isn't part of our responsibilites here, sorry. If you want to see that wiki page fixed, the best is probably to... fix it yourself :-) (it's a wiki after all) (frankly, I think it should be removed or replaced with a pair of

[issue23928] SSL wiki page, host name matching, CN and SAN

2015-04-13 Thread Jeffrey Walton
Jeffrey Walton added the comment: there's not much point in reporting bugs here about it. Oh, sorry about that. That page's contents look very outdated, by the way. Yeah, there's a few opportunities for improvement. -- ___ Python tracker