[issue19507] ssl.wrap_socket() with server_hostname should imply match_hostname()

Christian Heimes added the comment: I'll work on a PEP for 3.5 that will handle this issue. -- assignee: -> christian.heimes resolution: -> later status: open -> closed versions: +Python 3.5 -Python 3.4 ___ Python tracker

[issue19507] ssl.wrap_socket() with server_hostname should imply match_hostname()

Antoine Pitrou added the comment: I'm not sure why it's surprising. SNI and certificate validation are two different things. Besides, this is adding a new level of complication to the wrap_socket() signature. -- ___ Python tracker

[issue19507] ssl.wrap_socket() with server_hostname should imply match_hostname()

New submission from Christian Heimes: I find it surprising that wrap_socket() doesn't verify the server name with match_hostname() when it is called with a server_name argument. The check should be done by default. I suggest: - add validate_hostname=True flag to wrap_socket() and functions th