diff options
| author | William Woodruff <william@yossarian.net> | 2024-03-06 21:44:58 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-03-06 21:44:58 (GMT) |
| commit | 0876b921b28bb14e3fa61b188e52fc9b4c77cb1a (patch) | |
| tree | 62bc49024ede52d872ea9a270390bb338709b653 /Lib/contextlib.py | |
| parent | ea1803e608a7aaf9cf2c07e510d8540d46d3b9ad (diff) | |
| download | cpython-0876b921b28bb14e3fa61b188e52fc9b4c77cb1a.zip cpython-0876b921b28bb14e3fa61b188e52fc9b4c77cb1a.tar.gz cpython-0876b921b28bb14e3fa61b188e52fc9b4c77cb1a.tar.bz2 | |
gh-107361: strengthen default SSL context flags (#112389)
This adds `VERIFY_X509_STRICT` to make the default
SSL context perform stricter (per RFC 5280) validation, as well
as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant
path-building behavior.
As part of this changeset, I had to tweak `make_ssl_certs.py`
slightly to emit 5280-conforming CA certs. This changeset includes
the regenerated certificates after that change.
Signed-off-by: William Woodruff <william@yossarian.net>
Co-authored-by: Victor Stinner <vstinner@python.org>
Diffstat (limited to 'Lib/contextlib.py')
0 files changed, 0 insertions, 0 deletions