[issue31242] Add SSLContext.set_verify_callback()

Christian Heimes added the comment: bpo-28747 was an older ticket for implementing a callback. -- assignee: christian.heimes -> ___ Python tracker ___ ___

[issue31242] Add SSLContext.set_verify_callback()

Christian Heimes added the comment: Unfortunately a generic and future-proof verify callback is much more work. We need to expose and wrap X509_STORE_CTX, X509_STORE, X509 (include STACK_OF(X509)), and probably several other OpenSSL structures. We also need to expose error codes. --

[issue31242] Add SSLContext.set_verify_callback()

Adrian Freund added the comment: I also need this feature for something I'm working on, so I looked into it a bit and pushed a small proof of concept implementation to GitHub (See PR 31391). I'm not sure if I'll have enough time to finish and clean up this implementation, but at least there

[issue31242] Add SSLContext.set_verify_callback()

Change by Adrian Freund : -- keywords: +patch pull_requests: +29536 stage: needs patch -> patch review pull_request: https://github.com/python/cpython/pull/31391 ___ Python tracker ___

[issue31242] Add SSLContext.set_verify_callback()

Change by Adrian Freund : -- nosy: +freundTech ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.p

[issue31242] Add SSLContext.set_verify_callback()

Change by MineRobber___T : -- nosy: +MineRobber9000 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://m

[issue31242] Add SSLContext.set_verify_callback()

Kent Watsen added the comment: Very much needing this! My situation is a mutli-tenant asynchio-based server whereby each tenant is able to configure other clients that can connect. The current strategy requires all certs to be known up-front that, for now, necessitates a painful restart wh

[issue31242] Add SSLContext.set_verify_callback()

Change by Kent Watsen : -- nosy: +kwatsen ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python

[issue31242] Add SSLContext.set_verify_callback()

Change by David Peall : -- nosy: +David Peall ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.py

[issue31242] Add SSLContext.set_verify_callback()

Change by Christian Heimes : -- stage: -> needs patch versions: +Python 3.8 ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue31242] Add SSLContext.set_verify_callback()

New submission from Ryan Finnie: At the moment, SSLContext.verify_mode() allows for three modes when dealing with Purpose.CLIENT_AUTH / server_side=True: - CERT_NONE (server does not request client certificate, client does not provide it) - CERT_OPTIONAL (server requests client certificate, ra