New submission from David D Lowe:
The documentation for ssl.SSLSocket.getpeercert states:
> If the binary_form parameter is True, and a certificate was provided, this
> method returns the DER-encoded form of the entire certificate as a sequence
> of bytes, or None if the peer did not provide a certificate. This return
> value is independent of validation; if validation was required (CERT_OPTIONAL
> or CERT_REQUIRED), it will have been validated, but if CERT_NONE was used to
> establish the connection, the certificate, if present, will not have been
> validated.
However, in the case that validation is not required, getpeercert does not
return a certificate, even when binary_form is set to True.
--
components: Library (Lib)
files: test.tar.gz
messages: 186999
nosy: Flimm
priority: normal
severity: normal
status: open
title: ssl.SSLSocket.getpeercert does not return client certificate
type: behavior
versions: Python 2.7, Python 3.2
Added file: http://bugs.python.org/file29867/test.tar.gz
___
Python tracker
<http://bugs.python.org/issue17739>
___
___
Python-bugs-list mailing list
Unsubscribe:
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com