cpython

123997 commits 6 branches 635 tags 3.8 GiB

Author SHA1 Message Date

Author	SHA1	Message	Date
Felix Fontein	4eab6e8d29	[3.13] gh-118658: Modify cert generation script to extract cert3.pem (GH-124598) (GH-124972) (cherry picked from commit `480354dc23`)	2024-10-08 13:37:30 +02:00
William Woodruff	0876b921b2	gh-107361: strengthen default SSL context flags (#112389 ) This adds `VERIFY_X509_STRICT` to make the default SSL context perform stricter (per RFC 5280) validation, as well as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant path-building behavior. As part of this changeset, I had to tweak `make_ssl_certs.py` slightly to emit 5280-conforming CA certs. This changeset includes the regenerated certificates after that change. Signed-off-by: William Woodruff <william@yossarian.net> Co-authored-by: Victor Stinner <vstinner@python.org>	2024-03-06 13:44:58 -08:00
Nikita Sobolev	e57ecf6bbc	gh-108303: Move all certificates to `Lib/test/certdata/` (#109489 )	2023-09-16 18:47:18 +02:00

Felix Fontein

4eab6e8d29

[3.13] gh-118658: Modify cert generation script to extract cert3.pem (GH-124598) (GH-124972)

(cherry picked from commit 480354dc23)

2024-10-08 13:37:30 +02:00

William Woodruff

0876b921b2

gh-107361: strengthen default SSL context flags (#112389 )

This adds `VERIFY_X509_STRICT` to make the default
SSL context perform stricter (per RFC 5280) validation, as well
as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant
path-building behavior.

As part of this changeset, I had to tweak `make_ssl_certs.py`
slightly to emit 5280-conforming CA certs. This changeset includes
the regenerated certificates after that change.

Signed-off-by: William Woodruff <william@yossarian.net>
Co-authored-by: Victor Stinner <vstinner@python.org>

2024-03-06 13:44:58 -08:00

Nikita Sobolev

e57ecf6bbc

gh-108303: Move all certificates to Lib/test/certdata/ (#109489 )

2023-09-16 18:47:18 +02:00

Renamed from Lib/test/make_ssl_certs.py (Browse further)

3 commits