[issue31432] Documention for CERT_OPTIONAL is misleading

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue31432] Documention for CERT_OPTIONAL is misleading

Irit Katriel added the comment: This seems complete, can it be closed? -- nosy: +iritkatriel ___ Python tracker ___ ___ Python-bugs

[issue31432] Documention for CERT_OPTIONAL is misleading

Ned Deily added the comment: New changeset e25757408dc22561af9f9589c2c7e2a2fbb66ee4 by Ned Deily in branch '3.6': bpo-31432: Clarify ssl CERT_NONE/OPTIONAL/REQUIRED docs. (GH-3530) (GH-7652) https://github.com/python/cpython/commit/e25757408dc22561af9f9589c2c7e2a2fbb66ee4 -- __

[issue31432] Documention for CERT_OPTIONAL is misleading

Change by Ned Deily : -- pull_requests: +7271 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.py

[issue31432] Documention for CERT_OPTIONAL is misleading

Ned Deily added the comment: New changeset 42198571c586e0dc56836b79329f94952b1975bb by Ned Deily (Miss Islington (bot)) in branch '3.7': bpo-31432: Revert unrelated code changes to _ssl.c and test_ssl (GH-7650) (GH-7651) https://github.com/python/cpython/commit/42198571c586e0dc56836b79329f94

[issue31432] Documention for CERT_OPTIONAL is misleading

Change by miss-islington : -- pull_requests: +7270 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://ma

[issue31432] Documention for CERT_OPTIONAL is misleading

Ned Deily added the comment: New changeset 4531ec74c4a9c8e15ee2bdec11b12796ce000f6f by Ned Deily in branch 'master': bpo-31432: Revert unrelated code changes to _ssl.c and test_ssl (GH-7650) https://github.com/python/cpython/commit/4531ec74c4a9c8e15ee2bdec11b12796ce000f6f -- __

[issue31432] Documention for CERT_OPTIONAL is misleading

Change by Ned Deily : -- pull_requests: +7269 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.py

[issue31432] Documention for CERT_OPTIONAL is misleading

Ned Deily added the comment: New changeset a5db479ac4cdcc0d94ec1d7a594720a651d90433 by Ned Deily (Miss Islington (bot)) in branch '3.7': bpo-31432: Clarify ssl CERT_NONE/OPTIONAL/REQUIRED docs. (GH-3530) (GH-7649) https://github.com/python/cpython/commit/a5db479ac4cdcc0d94ec1d7a594720a651d904

[issue31432] Documention for CERT_OPTIONAL is misleading

Ned Deily added the comment: New changeset ef24b6c54d40e7820456873a6eab6ef57d2bd0db by Ned Deily (Christian Heimes) in branch 'master': bpo-31432: Clarify ssl CERT_NONE/OPTIONAL/REQUIRED docs. (GH-3530) https://github.com/python/cpython/commit/ef24b6c54d40e7820456873a6eab6ef57d2bd0db --

[issue31432] Documention for CERT_OPTIONAL is misleading

Change by miss-islington : -- pull_requests: +7268 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://ma

[issue31432] Documention for CERT_OPTIONAL is misleading

Changes by Christian Heimes : -- keywords: +patch pull_requests: +3527 stage: -> patch review ___ Python tracker ___ ___ Python-bugs

[issue31432] Documention for CERT_OPTIONAL is misleading

Christian Heimes added the comment: PS: OpenSSL still validates the chain when SSL_VERIFY_NONE is set. In that mode OpenSSL just does not abort the handshake when an error occurs. OpenSSL keeps the last verification error around, see #31372. -- ___

[issue31432] Documention for CERT_OPTIONAL is misleading

New submission from Christian Heimes: >From #31431, the documentation of CERT_OPTIONAL and CERT_REQUIRED are >misleading. For client side sockets, CERT_OPTIONAL does **NOT** mean that no >certificates will be required from the other side of the socket connection. >The server **must** provide a

[issue31432] Documention for CERT_OPTIONAL is misleading

Changes by Christian Heimes : -- nosy: +alex, dstufft, janssen ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: