Re: [Python-Dev] Issues in Python TLS

2016-08-17 Thread Nick Coghlan
On 14 August 2016 at 09:14, Benjamin Peterson wrote: > Correctness of TLS certificate verification is known to depend deeply on > distribution. Python began to verify certificates by default only in in > version 2.7.9. Many OS distributions (in particular, Ubuntu) did not >

Re: [Python-Dev] Issues in Python TLS

2016-08-14 Thread Barry Warsaw
On Aug 13, 2016, at 04:14 PM, Benjamin Peterson wrote: >Correctness of TLS certificate verification is known to depend deeply on >distribution. Python began to verify certificates by default only in in >version 2.7.9. Many OS distributions (in particular, Ubuntu) did not >enable verification for

Re: [Python-Dev] Issues in Python TLS

2016-08-13 Thread Benjamin Peterson
Correctness of TLS certificate verification is known to depend deeply on distribution. Python began to verify certificates by default only in in version 2.7.9. Many OS distributions (in particular, Ubuntu) did not enable verification for their stable distributions for backwards compatibility

[Python-Dev] Issues in Python TLS

2016-08-13 Thread Mauri Miettinen
Hello, We are experimenting with a tool for inspecting how well languages and libraries support server certificate verification when establishing TLS connections. We are getting rather confusing results in our first major shootout of bundled CPython 2 and 3 versions in major, still supported OS