summaryrefslogtreecommitdiffstats
path: root/Lib/test/test_ssl.py
Commit message (Collapse)AuthorAgeFilesLines
* Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X TigerChristian Heimes2013-08-251-7/+15
|
* Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork.Christian Heimes2013-08-211-0/+32
| | | | | A pthread_atfork() child handler is used to seeded the PRNG with pid, time and some stack data.
* Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytesChristian Heimes2013-08-161-0/+29
| | | | | | | inside subjectAltName correctly. Formerly the module has used OpenSSL's GENERAL_NAME_print() function to get the string represention of ASN.1 strings for rfc822Name (email), dNSName (DNS) and uniformResourceIdentifier (URI).
* Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of ↵Antoine Pitrou2013-05-181-0/+11
| | | | service using certificates with many wildcards (CVE-2013-2099).
* Issue #13898: test_ssl no longer prints a spurious stack trace on Ubuntu.Nadeem Vawda2013-03-031-1/+5
|\
| * Issue #13898: test_ssl no longer prints a spurious stack trace on Ubuntu.Nadeem Vawda2013-03-031-1/+7
| |
* | In test_ssl, threaded tests shouldn't need the "network" resource to be enabledAntoine Pitrou2013-01-121-1/+1
| |
* | Issue #16923: Fix ResourceWarnings in test_ssl.Antoine Pitrou2013-01-121-33/+35
| |
* | remove __del__ because it's evil and also prevents the ResourceWarning on ↵Benjamin Peterson2013-01-101-0/+8
| | | | | | | | the socket from happening (closes #16900)
* | Forward port new test for SSLSocket.connect_ex()Antoine Pitrou2012-12-281-0/+11
|\ \ | |/
| * Forward port new test for SSLSocket.connect_ex()Antoine Pitrou2012-12-281-0/+11
| |\
| | * Backport Python 3.2 fix for issue #12065, and add another test for ↵Antoine Pitrou2012-12-281-0/+28
| | | | | | | | | | | | SSLSocket.connect_ex().
| | * Closes #15793: Stack corruption in ssl.RAND_egd(). Python 2.7 hasn't any ↵Jesus Cea2012-09-101-6/+2
| | | | | | | | | | | | issue about this, but add a test just to be sure
| | * Skip test_algorithms (known remote hosts need SNI, which is only available ↵Antoine Pitrou2012-05-041-1/+2
| | | | | | | | | | | | on 3.2+)
| | * Fix intermittent test_ssl failure.Antoine Pitrou2012-01-271-0/+1
| | |
| | * Issue #13636: Weak ciphers are now disabled by default in the ssl moduleAntoine Pitrou2012-01-031-1/+24
| | | | | | | | | | | | (except when SSLv2 is explicitly asked for).
| | * Use context managers in test_ssl to simplify test writing.Antoine Pitrou2011-12-211-64/+38
| | |
| | * Backout redundant changeset 1de4d92cd6a4Antoine Pitrou2011-10-311-2/+0
| | |
| | * test_protocol_sslv2(): Skip this test if ssl.PROTOCOL_SSLv2 is notBarry Warsaw2011-10-311-0/+2
| | | | | | | | | | | | defined (as is the case with Ubuntu 11.10).
| | * Remove unstable SSL tests in the absence of ssl.OP_NO_{SSLv2,SSLv3,TLSv1}Antoine Pitrou2011-10-301-12/+2
| | |
| | * - Issue #13218: Fix test_ssl failures on Debian/Ubuntu.Barry Warsaw2011-10-281-2/+4
| | |
| | * Issue #13034: When decoding some SSL certificates, the subjectAltName ↵Antoine Pitrou2011-10-011-2/+22
| | | | | | | | | | | | extension could be unreported.
| | * Issue #12012: test_ssl uses test_support.import_module()Victor Stinner2011-05-221-9/+1
| | | | | | | | | | | | | | | | | | | | | Skip the whole file if the SSL module is missing. It was already the case, except that the SkipTest exception was raised in test_main(). This commit fixes an error in test_ssl if the ssl module is missing.
| | * (Merge 3.1) Issue #12012: ssl.PROTOCOL_SSLv2 becomes optionalVictor Stinner2011-05-091-22/+27
| | | | | | | | | | | | | | | | | | | | | OpenSSL is now compiled with OPENSSL_NO_SSL2 defined (without the SSLv2 protocol) on Debian: fix the ssl module on Debian Testing and Debian Sid. Optimize also ssl.get_protocol_name(): speed does matter!
| | * Merged revisions 88671 via svnmerge fromAntoine Pitrou2011-02-271-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88671 | antoine.pitrou | 2011-02-27 16:44:12 +0100 (dim., 27 févr. 2011) | 3 lines Follow up to r88664: non-blocking connect-ex() can return EWOULDBLOCK under Windows ........
| | * Merged revisions 88664 via svnmerge fromAntoine Pitrou2011-02-261-0/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88664 | antoine.pitrou | 2011-02-27 00:24:06 +0100 (dim., 27 févr. 2011) | 4 lines Issue #11326: Add the missing connect_ex() implementation for SSL sockets, and make it work for non-blocking connects. ........
| | * Merged revisions 87861,87863 via svnmerge fromAntoine Pitrou2011-01-081-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r87861 | antoine.pitrou | 2011-01-08 11:23:29 +0100 (sam., 08 janv. 2011) | 3 lines Fix test_ssl after r87849 ........ r87863 | antoine.pitrou | 2011-01-08 11:28:11 +0100 (sam., 08 janv. 2011) | 3 lines Add EHOSTUNREACH ('No route to host') to the errnos trapped by transient_internet(). ........
| | * Don't fail in test_ssl when svn.python.org is unavailableAntoine Pitrou2010-10-311-11/+12
| | |
| | * Issue #9729: Fix the signature of SSLSocket.recvfrom() andAntoine Pitrou2010-09-141-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | SSLSocket.sendto() to match the corresponding socket methods. Also, fix various SSLSocket methods to raise socket.error rather than an unhelpful TypeError when called on an unconnected socket. Original patch by Andrew Bennetts. NOTE: obviously, these methods are untested and unused in the real world...
| | * Some tests didn't get executed (because of the merge in r83728)Antoine Pitrou2010-09-141-1/+1
| | |
| | * Merged revisions 84650 via svnmerge fromAntoine Pitrou2010-09-091-78/+76
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r84650 | antoine.pitrou | 2010-09-09 15:31:46 +0200 (jeu., 09 sept. 2010) | 4 lines Use transient_internet() where appropriate in test_ssl (svn.python.org is sometimes unavailable) ........
| | * Merged revisions 84597-84599 via svnmerge fromAntoine Pitrou2010-09-071-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r84597 | antoine.pitrou | 2010-09-07 22:42:19 +0200 (mar., 07 sept. 2010) | 5 lines Issue #8574: better implementation of test.support.transient_internet(). Original patch by Victor. ........ r84598 | antoine.pitrou | 2010-09-07 23:05:49 +0200 (mar., 07 sept. 2010) | 6 lines Issue #9792: In case of connection failure, socket.create_connection() would swallow the exception and raise a new one, making it impossible to fetch the original errno, or to filter timeout errors. Now the original error is re-raised. ........ r84599 | antoine.pitrou | 2010-09-07 23:09:09 +0200 (mar., 07 sept. 2010) | 4 lines Improve transient_internet() again to detect more network errors, and use it in test_robotparser. Fixes #8574. ........
| | * Merged revisions 84021-84023 via svnmerge fromAntoine Pitrou2010-08-141-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r84021 | antoine.pitrou | 2010-08-14 18:24:38 +0200 (sam., 14 août 2010) | 4 lines Add a reasonable timeout to network SSL tests, so as to avoid buildbot timeouts when the remote server doesn't answer. ........ r84022 | antoine.pitrou | 2010-08-14 18:32:10 +0200 (sam., 14 août 2010) | 4 lines This is a better resolution than r84021 (because it will also affect ssl.get_server_certificate()). ........ r84023 | antoine.pitrou | 2010-08-14 18:33:38 +0200 (sam., 14 août 2010) | 3 lines There doesn't seem to be a reason for this test to be disabled. ........
| | * Don't crash when the _ssl module isn't builtAntoine Pitrou2010-08-051-1/+5
| | |
| | * Merged revisions 83727 via svnmerge fromAntoine Pitrou2010-08-041-0/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r83727 | antoine.pitrou | 2010-08-04 19:14:06 +0200 (mer., 04 août 2010) | 3 lines Try to fix issue #9415: skip some tests on broken Ubuntu OpenSSL ........
| | * `self` doesn't exist hereAntoine Pitrou2010-05-061-3/+3
| | |
| | * Remove duplicate testAntoine Pitrou2010-05-011-21/+0
| | |
| | * Fix style issues in test_sslAntoine Pitrou2010-04-281-138/+143
| | |
| | * Issue #8086: In :func:`ssl.DER_cert_to_PEM_cert()`, fix missing newlineAntoine Pitrou2010-04-271-0/+4
| | | | | | | | | | | | before the certificate footer. Patch by Kyle VanderBeek.
| | * socket.error can really happen here, and fix a possible NameErrorAntoine Pitrou2010-04-271-1/+4
| | |
| | * Qualify or remove or bare excepts. Simplify exception handling in places.Antoine Pitrou2010-04-271-193/+136
| | | | | | | | | | | | Remove uses of test_support.TestFailed.
| | * replace custom code with standard library functionality (HTTPServer.shutdown())Antoine Pitrou2010-04-271-48/+7
| | | | | | | | | | | | | | | + enable test that was never run (!) + make tests faster by lowering polling timeout
| | * Remove uses of find_unused_port() in test_ssl, and small cleanupsAntoine Pitrou2010-04-271-19/+17
| | |
| | * Issue #5103: SSL handshake would ignore the socket timeout and blockAntoine Pitrou2010-04-241-3/+70
| | | | | | | | | | | | indefinitely if the other end didn't respond.
| | * Make test_makefile_close a networked test (can't read() from a non-connectedAntoine Pitrou2010-04-241-16/+18
| | | | | | | | | | | | | | | socket under OS X), and skip it under Windows (where sockets can't be read() from using their fds).
| | * Issue #5238: Calling makefile() on an SSL object would prevent theAntoine Pitrou2010-04-231-0/+18
| | | | | | | | | | | | underlying socket from being closed until all objects get truely destroyed.
| | * Issue #7943: Fix circular reference created when instantiating an SSLAntoine Pitrou2010-04-231-0/+11
| | | | | | | | | | | | socket. Initial patch by Péter Szabó.
| | * Skip test on old versions of OpenSSLAntoine Pitrou2010-04-221-3/+3
| | |
| | * Temporarily display OpenSSL version in verbose run -- trying to diagnose ↵Antoine Pitrou2010-04-221-0/+3
| | | | | | | | | | | | failure on Neal's buildbot.
| | * Issue #8484: Load all ciphers and digest algorithms when initializingAntoine Pitrou2010-04-211-0/+20
| | | | | | | | | | | | | | | the _ssl extension, such that verification of some SSL certificates doesn't fail because of an "unknown algorithm".