[issue31399] Let OpenSSL verify hostname and IP address

Change by ramikg : -- nosy: +ramikg nosy_count: 4.0 -> 5.0 pull_requests: +27115 pull_request: https://github.com/python/cpython/pull/28602 ___ Python tracker ___ _

[issue31399] Let OpenSSL verify hostname and IP address

Christian Heimes added the comment: The feature has been implemented. I'll take care of the failing tests in #32706. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: +Python 3.8 ___ Python tracker

[issue31399] Let OpenSSL verify hostname and IP address

Change by Socob <206a8...@opayq.com>: -- nosy: +Socob ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://

[issue31399] Let OpenSSL verify hostname and IP address

Christian Heimes added the comment: New changeset 66e5742becce38e69a8f09e5f7051445fc57e92e by Christian Heimes in branch 'master': bpo-28414: ssl module idna test (#5395) https://github.com/python/cpython/commit/66e5742becce38e69a8f09e5f7051445fc57e92e -- ___

[issue31399] Let OpenSSL verify hostname and IP address

STINNER Victor added the comment: It seems like the commit 61d478c71c5341cdc54e6bfb4ace4252852fd972 introduced a regression in test_ftplib: bpo-32706. Can you please take a look? -- nosy: +vstinner ___ Python tracker

[issue31399] Let OpenSSL verify hostname and IP address

Change by Christian Heimes : -- pull_requests: +5231 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://m

[issue31399] Let OpenSSL verify hostname and IP address

Christian Heimes added the comment: New changeset 61d478c71c5341cdc54e6bfb4ace4252852fd972 by Christian Heimes in branch 'master': bpo-31399: Let OpenSSL verify hostname and IP address (#3462) https://github.com/python/cpython/commit/61d478c71c5341cdc54e6bfb4ace4252852fd972 -- _

[issue31399] Let OpenSSL verify hostname and IP address

Christian Heimes added the comment: https://github.com/libressl-portable/portable/issues/381 -- ___ Python tracker ___ ___ Python-bu

[issue31399] Let OpenSSL verify hostname and IP address

Christian Heimes added the comment: Bad news, LibreSSL is the worst. Even the latest release 2.6.4 does not implement https://www.openssl.org/docs/man1.0.2/crypto/X509_VERIFY_PARAM_set1_host.html or X509_VERIFY_PARAM_set_hostflags(). I don't get why it provides X509_check_host() but not X509

[issue31399] Let OpenSSL verify hostname and IP address

Changes by Jakub Wilk : -- nosy: +jwilk ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.or

[issue31399] Let OpenSSL verify hostname and IP address

Changes by Christian Heimes : -- keywords: +patch pull_requests: +3454 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsub

[issue31399] Let OpenSSL verify hostname and IP address

New submission from Christian Heimes: Python should no longer attempt to verify hostname and ip addresses itself. OpenSSL 1.0.2 and newer is able to verify hostname and IP addresses itself. The new APIs are properly hooked into chain validation step. Hostname matching implements RFC 6125. CN m