summaryrefslogtreecommitdiffstats
path: root/Lib/test/certdata
Commit message (Collapse)AuthorAgeFilesLines
* [3.13] gh-118658: Modify cert generation script to extract cert3.pem ↵Felix Fontein2024-10-082-1/+3
| | | | | (GH-124598) (GH-124972) (cherry picked from commit 480354dc236af9ae9d47b2520aa85fb7293c7b68)
* [3.13] gh-118658: Return consistent types from `get_un/verified_chain` in ↵Miss Islington (bot)2024-08-191-0/+34
| | | | | | | | | `SSLObject` and `SSLSocket` (GH-118669) (#123082) gh-118658: Return consistent types from `get_un/verified_chain` in `SSLObject` and `SSLSocket` (GH-118669) (cherry picked from commit 8ef358dae1959e2aff8b04fb69b8a36d6da6847a) Co-authored-by: Mateusz Nowak <nowak.mateusz@hotmail.com> Co-authored-by: Gregory P. Smith [Google LLC] <greg@krypto.org>
* gh-107361: strengthen default SSL context flags (#112389)William Woodruff2024-03-0620-1062/+1088
| | | | | | | | | | | | | This adds `VERIFY_X509_STRICT` to make the default SSL context perform stricter (per RFC 5280) validation, as well as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant path-building behavior. As part of this changeset, I had to tweak `make_ssl_certs.py` slightly to emit 5280-conforming CA certs. This changeset includes the regenerated certificates after that change. Signed-off-by: William Woodruff <william@yossarian.net> Co-authored-by: Victor Stinner <vstinner@python.org>
* gh-108303: Move all certificates to `Lib/test/certdata/` (#109489)Nikita Sobolev2023-09-1631-0/+2140