| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | gh-107562: Update test certificates to expire far in the future (GH-125104) | Petr Viktorin | 2024-10-09 | 1 | -61/+61 |
| | | | | | | Generated with Lib/test/certdata/make_ssl_certs.py using openssl-3.2.2-3.fc40.x86_64 (Fedora 40). | ||||
| * | gh-107361: strengthen default SSL context flags (#112389) | William Woodruff | 2024-03-06 | 1 | -58/+59 |
| | | | | | | | | | | | | | | This adds `VERIFY_X509_STRICT` to make the default SSL context perform stricter (per RFC 5280) validation, as well as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant path-building behavior. As part of this changeset, I had to tweak `make_ssl_certs.py` slightly to emit 5280-conforming CA certs. This changeset includes the regenerated certificates after that change. Signed-off-by: William Woodruff <william@yossarian.net> Co-authored-by: Victor Stinner <vstinner@python.org> | ||||
| * | gh-108303: Move all certificates to `Lib/test/certdata/` (#109489) | Nikita Sobolev | 2023-09-16 | 1 | -0/+66 |
 |
index : cpython.git | |
| https://github.com/python/cpython.git |
| summaryrefslogtreecommitdiffstats |