Antoine Pitrou
|
e6d2f159fc
|
Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data.
|
2013-12-28 17:30:51 +01:00 |
|
Antoine Pitrou
|
3e86ba4e32
|
Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data.
|
2013-12-28 17:26:33 +01:00 |
|
Christian Heimes
|
1da3ba8697
|
Issue #19509: Don't close the socket in do_handshake() when hostname verification fails.
|
2013-12-04 20:46:20 +01:00 |
|
Christian Heimes
|
a02c69a73b
|
add check_hostname arg to ssl._create_stdlib_context()
|
2013-12-02 20:59:28 +01:00 |
|
Christian Heimes
|
1aa9a75fbf
|
Issue #19509: Add SSLContext.check_hostname to match the peer's certificate
with server_hostname on handshake.
|
2013-12-02 02:41:19 +01:00 |
|
Christian Heimes
|
dec813f118
|
ssl.create_default_context() sets OP_NO_COMPRESSION to prevent CRIME
|
2013-11-28 08:06:54 +01:00 |
|
Christian Heimes
|
67986f9431
|
Issue #19735: Implement private function ssl._create_stdlib_context() to
create SSLContext objects in Python's stdlib module. It provides a single
configuration point and makes use of SSLContext.load_default_certs().
|
2013-11-23 22:43:47 +01:00 |
|
Christian Heimes
|
4c05b472dd
|
Issue #19689: Add ssl.create_default_context() factory function. It creates
a new SSLContext object with secure default settings.
|
2013-11-23 15:58:30 +01:00 |
|
Christian Heimes
|
72d28500b3
|
Issue #19292: Add SSLContext.load_default_certs() to load default root CA
certificates from default stores or system stores. By default the method
loads CA certs for authentication of server certs.
|
2013-11-23 13:56:58 +01:00 |
|
Christian Heimes
|
44109d7de7
|
Issue #17134: Finalize interface to Windows' certificate store. Cert and
CRL enumeration are now two functions. enum_certificates() also returns
purpose flags as set of OIDs.
|
2013-11-22 01:51:30 +01:00 |
|
Christian Heimes
|
225877917e
|
Issue #8813: Add SSLContext.verify_flags to change the verification flags
of the context in order to enable certification revocation list (CRL)
checks or strict X509 rules.
|
2013-11-21 23:56:13 +01:00 |
|
Christian Heimes
|
a6bc95aa02
|
Issue #19448: Add private API to SSL module to lookup ASN.1 objects by OID, NID, short name and long name.
|
2013-11-17 19:59:14 +01:00 |
|
Georg Brandl
|
72c98d3a76
|
Issue #17997: Change behavior of `ssl.match_hostname()` to follow RFC 6125,
for security reasons. It now doesn't match multiple wildcards nor wildcards
inside IDN fragments.
|
2013-10-27 07:16:53 +01:00 |
|
Georg Brandl
|
b89b5df9c9
|
merge with 3.3
|
2013-10-27 07:46:09 +01:00 |
|
Ezio Melotti
|
9a3777e525
|
#18705: merge with 3.3.
|
2013-08-17 15:53:55 +03:00 |
|
Ezio Melotti
|
30b9d5d3af
|
#18705: fix a number of typos. Patch by Févry Thibault.
|
2013-08-17 15:50:46 +03:00 |
|
Antoine Pitrou
|
60a26e0516
|
Issue #9177: Calling read() or write() now raises ValueError, not AttributeError, on a closed SSL socket.
Patch by Senko Rasic.
|
2013-07-20 19:35:16 +02:00 |
|
Brett Cannon
|
cd171c8e92
|
Issue #18200: Back out usage of ModuleNotFoundError (8d28d44f3a9a)
|
2013-07-04 17:43:24 -04:00 |
|
Brett Cannon
|
0a140668fa
|
Issue #18200: Update the stdlib (except tests) to use
ModuleNotFoundError.
|
2013-06-13 20:57:26 -04:00 |
|
Christian Heimes
|
46bebee25f
|
Issue #17134: Add ssl.enum_cert_store() as interface to Windows' cert store.
|
2013-06-09 19:03:31 +02:00 |
|
Christian Heimes
|
6d7ad13a45
|
Issue #18143: Implement ssl.get_default_verify_paths() in order to debug
the default locations for cafile and capath.
|
2013-06-09 18:02:55 +02:00 |
|
Antoine Pitrou
|
636f93c63b
|
Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099).
|
2013-05-18 17:56:42 +02:00 |
|
Antoine Pitrou
|
31fb419908
|
Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099).
|
2013-05-18 17:59:12 +02:00 |
|
Antoine Pitrou
|
242db728e2
|
Issue #13721: SSLSocket.getpeercert() and SSLSocket.do_handshake() now raise an OSError with ENOTCONN, instead of an AttributeError, when the SSLSocket is not connected.
|
2013-05-01 20:52:07 +02:00 |
|
Giampaolo Rodola'
|
06d0c1e72c
|
remove uneffective 'while True' clause
|
2013-04-03 12:01:44 +02:00 |
|