Re: [Python-Dev] new ssl module is incompatible with servers that drop privileges

2008-09-09 Thread Forest
On Tue, September 9, 2008 12:49 pm, Bill Janssen wrote: >> IMHO, this severely limits the new ssl module's utility, and discourages >> good security practices. > > Please file a bug report. A bug report with a patch and tests would > be even better :-). Assign it to me. I filed one, but the bug

Re: [Python-Dev] new ssl module is incompatible with servers that drop privileges

2008-09-09 Thread Bill Janssen
> It accept them only as > paths to their location on the file system, which I believe means that a > server can only support SSL if it has read permission to its private key > file when client connections arrive. This is a problem for servers that > bind to their socket and drop privileges as soo

[Python-Dev] new ssl module is incompatible with servers that drop privileges

2008-09-09 Thread Forest
I've been trying out the new ssl module, and I love it so far, except for the way it accepts private keys and certificates. It accept them only as paths to their location on the file system, which I believe means that a server can only support SSL if it has read permission to its private key file