summaryrefslogtreecommitdiffstats
path: root/Lib
diff options
context:
space:
mode:
authorChristian Heimes <christian@cheimes.de>2013-11-21 02:40:15 (GMT)
committerChristian Heimes <christian@cheimes.de>2013-11-21 02:40:15 (GMT)
commitbd3a7f90b51c6bd7d057bad9d7addd0bed8a6e7d (patch)
tree15f4994108480a9d51bdc38c444c532cb7e11474 /Lib
parentefff7060f893c3a06543ab955696663a64eb2109 (diff)
downloadcpython-bd3a7f90b51c6bd7d057bad9d7addd0bed8a6e7d.zip
cpython-bd3a7f90b51c6bd7d057bad9d7addd0bed8a6e7d.tar.gz
cpython-bd3a7f90b51c6bd7d057bad9d7addd0bed8a6e7d.tar.bz2
Issue #18379: SSLSocket.getpeercert() returns CA issuer AIA fields, OCSP
and CRL distribution points.
Diffstat (limited to 'Lib')
-rw-r--r--Lib/test/test_ssl.py8
1 files changed, 7 insertions, 1 deletions
diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index b4eef36..8016728 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -212,6 +212,12 @@ class BasicSocketTests(unittest.TestCase):
(('DNS', 'projects.developer.nokia.com'),
('DNS', 'projects.forum.nokia.com'))
)
+ # extra OCSP and AIA fields
+ self.assertEqual(p['OCSP'], ('http://ocsp.verisign.com',))
+ self.assertEqual(p['caIssuers'],
+ ('http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer',))
+ self.assertEqual(p['crlDistributionPoints'],
+ ('http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl',))
def test_parse_cert_CVE_2013_4238(self):
p = ssl._ssl._test_decode_cert(NULLBYTECERT)
@@ -905,6 +911,7 @@ class ContextTests(unittest.TestCase):
'notAfter': asn1time('Mar 29 12:29:49 2033 GMT'),
'notBefore': asn1time('Mar 30 12:29:49 2003 GMT'),
'serialNumber': '00',
+ 'crlDistributionPoints': ('https://www.cacert.org/revoke.crl',),
'subject': ((('organizationName', 'Root CA'),),
(('organizationalUnitName', 'http://www.cacert.org'),),
(('commonName', 'CA Cert Signing Authority'),),
@@ -1269,7 +1276,6 @@ class NetworkedTests(unittest.TestCase):
s.close()
self.assertEqual(len(ctx.get_ca_certs()), 1)
-
try:
import threading
except ImportError: