summaryrefslogtreecommitdiffstats
path: root/Lib/test/test_ssl.py
Commit message (Collapse)AuthorAgeFilesLines
* replace 512 bit dh key with a 2014 bit one (closes #23844)Benjamin Peterson2015-04-021-1/+1
| | | | Patch by Cédric Krier.
* adjust test_crl_check for trusted first being defaultBenjamin Peterson2015-03-051-1/+2
|
* expose X509_V_FLAG_TRUSTED_FIRSTBenjamin Peterson2015-03-051-2/+3
|
* Issue #23345: Prevent test_ssl failures with large OpenSSL patch levelNed Deily2015-02-051-1/+1
| | | | values (like 0.9.8zc).
* Avoid deprecation warnings.Serhiy Storchaka2015-01-311-1/+1
|
* prefer server alpn ordering over the client'sBenjamin Peterson2015-01-231-2/+2
|
* pep 466 backport of alpn (#20188)Benjamin Peterson2015-01-231-4/+60
|
* Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. TheVictor Stinner2015-01-061-2/+3
| | | | | availability of the function is checked during the compilation. Patch written by Bernard Spil.
* allow ssl module to compile if openssl doesn't support SSL 3 (closes #22935)Benjamin Peterson2014-12-061-7/+16
| | | | Patch by Kurt Roeckx.
* allow hostname to be passed to SSLContext even if OpenSSL doesn't support ↵Benjamin Peterson2014-11-241-6/+2
| | | | | | SNI (closes #22921) Patch from Donald Stufft.
* remove py3k warning guardBenjamin Peterson2014-11-231-2/+1
|
* allow passing cert/ssl information to urllib2.urlopen and ↵Benjamin Peterson2014-11-231-4/+5
| | | | | | httplib.HTTPSConnection This is basically a backport of issues #9003 and #22366.
* test that keyfile can be NoneBenjamin Peterson2014-11-041-1/+1
|
* separate cert loading tests into Windows and non-Windows casesBenjamin Peterson2014-10-031-0/+15
|
* also use openssl envvars to find certs on windows (closes #22449)Benjamin Peterson2014-10-031-0/+8
| | | | Patch by Christian Heimes and Alex Gaynor.
* fix sslwrap_simple (closes #22523)Benjamin Peterson2014-10-021-1/+3
| | | | Thanks Alex Gaynor.
* Issue #22340: Fix Python 3 warnings in Python 2 testsVictor Stinner2014-09-051-1/+2
|
* Issue #20421: Add a .version() method to SSL sockets exposing the actual ↵Alex Gaynor2014-09-041-20/+47
| | | | | | protocol version in use. Backport from default.
* fix load_verify_locations on unicode paths (closes #22244)Benjamin Peterson2014-08-281-0/+3
|
* allow any socket error for rude shutdown testBenjamin Peterson2014-08-201-1/+1
|
* backport many ssl features from Python 3 (closes #21308)Benjamin Peterson2014-08-201-552/+2043
| | | | | A contribution of Alex Gaynor and David Reid with the generous support of Rackspace. May God have mercy on their souls.
* Issue #21976: Fix test_ssl to accept LibreSSL version strings.Antoine Pitrou2014-07-211-6/+10
| | | | Thanks to William Orr.
* use ssl.PROTOCOL_SSLv23 for maximum compatibility (closes #20896)Benjamin Peterson2014-03-121-3/+8
|
* Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly ↵Antoine Pitrou2014-01-091-1/+1
| | | | asked for.
* Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, ↵Antoine Pitrou2013-12-281-0/+7
| | | | rather than silently let them emit clear text data.
* Issue #19572: More silently skipped tests explicitly skipped.Zachary Ware2013-12-101-2/+1
|
* Fix testChristian Heimes2013-08-251-1/+1
|
* Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X TigerChristian Heimes2013-08-251-7/+15
|
* Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytesChristian Heimes2013-08-161-2/+27
| | | | | | | inside subjectAltName correctly. Formerly the module has used OpenSSL's GENERAL_NAME_print() function to get the string represention of ASN.1 strings for rfc822Name (email), dNSName (DNS) and uniformResourceIdentifier (URI).
* Fix test_ssl by replacing expired X509 certificateAntoine Pitrou2013-02-161-6/+5
|
* Backport Python 3.2 fix for issue #12065, and add another test for ↵Antoine Pitrou2012-12-281-0/+28
| | | | SSLSocket.connect_ex().
* Closes #15793: Stack corruption in ssl.RAND_egd(). Python 2.7 hasn't any ↵Jesus Cea2012-09-101-6/+2
| | | | issue about this, but add a test just to be sure
* Skip test_algorithms (known remote hosts need SNI, which is only available ↵Antoine Pitrou2012-05-041-1/+2
| | | | on 3.2+)
* Fix intermittent test_ssl failure.Antoine Pitrou2012-01-271-0/+1
|
* Issue #13636: Weak ciphers are now disabled by default in the ssl moduleAntoine Pitrou2012-01-031-1/+24
| | | | (except when SSLv2 is explicitly asked for).
* Use context managers in test_ssl to simplify test writing.Antoine Pitrou2011-12-211-64/+38
|
* Backout redundant changeset 1de4d92cd6a4Antoine Pitrou2011-10-311-2/+0
|
* test_protocol_sslv2(): Skip this test if ssl.PROTOCOL_SSLv2 is notBarry Warsaw2011-10-311-0/+2
| | | | defined (as is the case with Ubuntu 11.10).
* Remove unstable SSL tests in the absence of ssl.OP_NO_{SSLv2,SSLv3,TLSv1}Antoine Pitrou2011-10-301-12/+2
|
* - Issue #13218: Fix test_ssl failures on Debian/Ubuntu.Barry Warsaw2011-10-281-2/+4
|
* Issue #13034: When decoding some SSL certificates, the subjectAltName ↵Antoine Pitrou2011-10-011-2/+22
| | | | extension could be unreported.
* Issue #12012: test_ssl uses test_support.import_module()Victor Stinner2011-05-221-9/+1
| | | | | | | Skip the whole file if the SSL module is missing. It was already the case, except that the SkipTest exception was raised in test_main(). This commit fixes an error in test_ssl if the ssl module is missing.
* (Merge 3.1) Issue #12012: ssl.PROTOCOL_SSLv2 becomes optionalVictor Stinner2011-05-091-22/+27
| | | | | | | OpenSSL is now compiled with OPENSSL_NO_SSL2 defined (without the SSLv2 protocol) on Debian: fix the ssl module on Debian Testing and Debian Sid. Optimize also ssl.get_protocol_name(): speed does matter!
* Merged revisions 88671 via svnmerge fromAntoine Pitrou2011-02-271-1/+2
| | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88671 | antoine.pitrou | 2011-02-27 16:44:12 +0100 (dim., 27 févr. 2011) | 3 lines Follow up to r88664: non-blocking connect-ex() can return EWOULDBLOCK under Windows ........
* Merged revisions 88664 via svnmerge fromAntoine Pitrou2011-02-261-0/+43
| | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88664 | antoine.pitrou | 2011-02-27 00:24:06 +0100 (dim., 27 févr. 2011) | 4 lines Issue #11326: Add the missing connect_ex() implementation for SSL sockets, and make it work for non-blocking connects. ........
* Merged revisions 87861,87863 via svnmerge fromAntoine Pitrou2011-01-081-2/+2
| | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r87861 | antoine.pitrou | 2011-01-08 11:23:29 +0100 (sam., 08 janv. 2011) | 3 lines Fix test_ssl after r87849 ........ r87863 | antoine.pitrou | 2011-01-08 11:28:11 +0100 (sam., 08 janv. 2011) | 3 lines Add EHOSTUNREACH ('No route to host') to the errnos trapped by transient_internet(). ........
* Don't fail in test_ssl when svn.python.org is unavailableAntoine Pitrou2010-10-311-11/+12
|
* Issue #9729: Fix the signature of SSLSocket.recvfrom() andAntoine Pitrou2010-09-141-0/+13
| | | | | | | | | SSLSocket.sendto() to match the corresponding socket methods. Also, fix various SSLSocket methods to raise socket.error rather than an unhelpful TypeError when called on an unconnected socket. Original patch by Andrew Bennetts. NOTE: obviously, these methods are untested and unused in the real world...
* Some tests didn't get executed (because of the merge in r83728)Antoine Pitrou2010-09-141-1/+1
|
* Merged revisions 84650 via svnmerge fromAntoine Pitrou2010-09-091-78/+76
| | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r84650 | antoine.pitrou | 2010-09-09 15:31:46 +0200 (jeu., 09 sept. 2010) | 4 lines Use transient_internet() where appropriate in test_ssl (svn.python.org is sometimes unavailable) ........