diff options
| author | juhovh <juhovh@iki.fi> | 2021-04-18 11:11:48 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-04-18 11:11:48 (GMT) |
| commit | 49fdf118aeda891401d638ac32296c7d55d54678 (patch) | |
| tree | 28b2e0df7618d9934e70d4a72019bcfbff08d18b /Misc/NEWS.d/next | |
| parent | 2798f247c0747d28cb857fa80803797b24696cb6 (diff) | |
| download | cpython-49fdf118aeda891401d638ac32296c7d55d54678.zip cpython-49fdf118aeda891401d638ac32296c7d55d54678.tar.gz cpython-49fdf118aeda891401d638ac32296c7d55d54678.tar.bz2 | |
bpo-36076: Add SNI support to ssl.get_server_certificate. (GH-16820)
Many servers in the cloud environment require SNI to be used during the
SSL/TLS handshake, therefore it is not possible to fetch their certificates
using the ssl.get_server_certificate interface.
This change adds an additional optional hostname argument that can be used to
set the SNI. Note that it is intentionally a separate argument instead of
using the host part of the addr tuple, because one might want to explicitly
fetch the default certificate or fetch a certificate from a specific IP
address with the specified SNI hostname. A separate argument also works better
for backwards compatibility.
Automerge-Triggered-By: GH:tiran
Diffstat (limited to 'Misc/NEWS.d/next')
| -rw-r--r-- | Misc/NEWS.d/next/Library/2019-10-16-17-21-53.bpo-36076.FGeQQT.rst | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Library/2019-10-16-17-21-53.bpo-36076.FGeQQT.rst b/Misc/NEWS.d/next/Library/2019-10-16-17-21-53.bpo-36076.FGeQQT.rst new file mode 100644 index 0000000..7e9bc4e --- /dev/null +++ b/Misc/NEWS.d/next/Library/2019-10-16-17-21-53.bpo-36076.FGeQQT.rst @@ -0,0 +1 @@ +Added SNI support to :func:`ssl.get_server_certificate`. |