Re: SSL/TLS support in Pyro4

2017-08-04 Thread Christian Heimes
On 2017-08-04 17:11, Robin Becker wrote: > On 04/08/2017 15:12, Irmen de Jong wrote: >> On 04/08/2017 15:44, Robin Becker wrote: > .. >> You can specify a CAcert using load_verify_locations on the ssl >> context. Is that what >> you meant? I figured out that if you set that to the peer's

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Robin Becker
On 04/08/2017 15:12, Irmen de Jong wrote: On 04/08/2017 15:44, Robin Becker wrote: .. You can specify a CAcert using load_verify_locations on the ssl context. Is that what you meant? I figured out that if you set that to the peer's certificate it will then be yes I think so.

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Irmen de Jong
On 04/08/2017 15:44, Robin Becker wrote: > .. >> >> Hi Robin >> >> I am not sure how this is any benefit over the self-signed root certs that I >> now use? >> >> Except for the fact that these are a root cert as well and don't use any CA >> trust chain. >> To be able to validate this

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Robin Becker
.. Hi Robin I am not sure how this is any benefit over the self-signed root certs that I now use? Except for the fact that these are a root cert as well and don't use any CA trust chain. To be able to validate this cert, I have to load it as a CA cert on the validating side. Which

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Irmen de Jong
On 03/08/2017 20:30, Irmen de Jong wrote: > Alternatively, is there a cheap way to get an 'official' SSL certificate for > testing > purposes. I don't think letsencrypt can help here because it is only for web > sites? > (and their certs are only valid for a very short period) With some host

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Irmen de Jong
On 04/08/2017 10:26, Robin Becker wrote: > On 03/08/2017 19:30, Irmen de Jong wrote: > . >> >> I wonder if any current (or new) users of Pyro4 want to check this out? The >> biggest >> concern I have is that I only have dummy (self-signed) certificates so I >> can't test it >> with

Re: SSL/TLS support in Pyro4

2017-08-04 Thread Robin Becker
On 03/08/2017 19:30, Irmen de Jong wrote: . I wonder if any current (or new) users of Pyro4 want to check this out? The biggest concern I have is that I only have dummy (self-signed) certificates so I can't test it with "real" certs to see if the validation works correctly. ..

SSL/TLS support in Pyro4

2017-08-03 Thread Irmen de Jong
or systems to provide this (such as VPN or SSL tunneling). Until now: I've finally started adding SSL/TLS support to Pyro4 itself. The work-in-progress 4.62 version has it (git master branch). Docs are still lacking right now but there is a working ssl example included. I wonder if any current