summaryrefslogtreecommitdiffstats
path: root/Lib/test/certdata/make_ssl_certs.py
Commit message (Collapse)AuthorAgeFilesLines
* [3.13] gh-118658: Modify cert generation script to extract cert3.pem ↵Felix Fontein2024-10-081-0/+2
| | | | | (GH-124598) (GH-124972) (cherry picked from commit 480354dc236af9ae9d47b2520aa85fb7293c7b68)
* gh-107361: strengthen default SSL context flags (#112389)William Woodruff2024-03-061-1/+2
| | | | | | | | | | | | | This adds `VERIFY_X509_STRICT` to make the default SSL context perform stricter (per RFC 5280) validation, as well as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant path-building behavior. As part of this changeset, I had to tweak `make_ssl_certs.py` slightly to emit 5280-conforming CA certs. This changeset includes the regenerated certificates after that change. Signed-off-by: William Woodruff <william@yossarian.net> Co-authored-by: Victor Stinner <vstinner@python.org>
* gh-108303: Move all certificates to `Lib/test/certdata/` (#109489)Nikita Sobolev2023-09-161-0/+312