summaryrefslogtreecommitdiffstats
path: root/Lib/test/test_ssl.py
Commit message (Collapse)AuthorAgeFilesLines
* Issue #19095: SSLSocket.getpeercert() now raises ValueError when the SSL ↵Antoine Pitrou2013-09-291-1/+7
| | | | handshake hasn't been done.
* Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X TigerChristian Heimes2013-08-251-7/+15
|\
| * Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X TigerChristian Heimes2013-08-251-7/+15
| |
* | Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork.Christian Heimes2013-08-211-0/+32
|\ \ | |/ | | | | | | A pthread_atfork() child handler is used to seeded the PRNG with pid, time and some stack data.
| * Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork.Christian Heimes2013-08-211-0/+32
| | | | | | | | | | A pthread_atfork() child handler is used to seeded the PRNG with pid, time and some stack data.
* | Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytesChristian Heimes2013-08-161-0/+29
|\ \ | |/ | | | | | | | | | | inside subjectAltName correctly. Formerly the module has used OpenSSL's GENERAL_NAME_print() function to get the string represention of ASN.1 strings for rfc822Name (email), dNSName (DNS) and uniformResourceIdentifier (URI).
| * Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytesChristian Heimes2013-08-161-0/+29
| | | | | | | | | | | | | | inside subjectAltName correctly. Formerly the module has used OpenSSL's GENERAL_NAME_print() function to get the string represention of ASN.1 strings for rfc822Name (email), dNSName (DNS) and uniformResourceIdentifier (URI).
* | test_ssl: use a bytestring hereAntoine Pitrou2013-07-201-1/+1
| |
* | Issue #9177: Calling read() or write() now raises ValueError, not ↵Antoine Pitrou2013-07-201-0/+15
| | | | | | | | | | | | AttributeError, on a closed SSL socket. Patch by Senko Rasic.
* | Issue #18147: Add diagnostic functions to ssl.SSLContext().Christian Heimes2013-06-171-0/+57
| | | | | | | | | | get_ca_list() lists all loaded CA certificates and cert_store_stats() returns amount of loaded X.509 certs, X.509 CA certs and CRLs.
* | Issue #18207: Fix test_ssl for some versions of OpenSSL that ignore secondsChristian Heimes2013-06-171-2/+16
| | | | | | | | in ASN1_TIME fields.
* | Issue #17134: Add ssl.enum_cert_store() as interface to Windows' cert store.Christian Heimes2013-06-091-0/+23
| |
* | Issue #18143: Implement ssl.get_default_verify_paths() in order to debugChristian Heimes2013-06-091-0/+13
| | | | | | | | the default locations for cafile and capath.
* | Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of ↵Antoine Pitrou2013-05-181-0/+11
|\ \ | |/ | | | | service using certificates with many wildcards (CVE-2013-2099).
| * Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of ↵Antoine Pitrou2013-05-181-0/+11
| | | | | | | | service using certificates with many wildcards (CVE-2013-2099).
* | Issue #13721: SSLSocket.getpeercert() and SSLSocket.do_handshake() now raise ↵Antoine Pitrou2013-05-011-0/+15
| | | | | | | | an OSError with ENOTCONN, instead of an AttributeError, when the SSLSocket is not connected.
* | Fix a crash when setting a servername callback on a SSL server socket and ↵Antoine Pitrou2013-04-111-1/+10
| | | | | | | | | | | | | | the client doesn't send a server name. Patch by Kazuhiro Yoshida. (originally issue #8109)
* | In search of TLS 1.1 bug: add debugging output in verbose modeAntoine Pitrou2013-03-291-0/+5
| |
* | Use a subtest in test_ssl.test_echoAntoine Pitrou2013-03-291-4/+5
| |
* | Issue #16692: The ssl module now supports TLS 1.1 and TLS 1.2. Initial ↵Antoine Pitrou2013-03-281-20/+53
| | | | | | | | patch by Michele Orrù.
* | Issue #13898: test_ssl no longer prints a spurious stack trace on Ubuntu.Nadeem Vawda2013-03-031-1/+5
|\ \ | |/
| * Issue #13898: test_ssl no longer prints a spurious stack trace on Ubuntu.Nadeem Vawda2013-03-031-1/+5
| |\
| | * Issue #13898: test_ssl no longer prints a spurious stack trace on Ubuntu.Nadeem Vawda2013-03-031-1/+7
| | |
* | | Issue #17107: Test client-side SNI support in urllib.request thanks to the ↵Antoine Pitrou2013-02-051-1/+1
| | | | | | | | | | | | | | | | | | new server-side SNI support in the ssl module. Initial patch by Daniel Black.
* | | In test_ssl, threaded tests shouldn't need the network resource to be enabledAntoine Pitrou2013-01-121-1/+1
|\ \ \ | |/ /
| * | In test_ssl, threaded tests shouldn't need the "network" resource to be enabledAntoine Pitrou2013-01-121-1/+1
| | |
* | | Issue #16923: Fix ResourceWarnings in test_ssl.Antoine Pitrou2013-01-121-33/+35
|\ \ \ | |/ /
| * | Issue #16923: Fix ResourceWarnings in test_ssl.Antoine Pitrou2013-01-121-33/+35
| | |
* | | merge 3.3 (#16900)Benjamin Peterson2013-01-101-0/+8
|\ \ \ | |/ /
| * | remove __del__ because it's evil and also prevents the ResourceWarning on ↵Benjamin Peterson2013-01-101-0/+8
| | | | | | | | | | | | the socket from happening (closes #16900)
* | | Issue #8109: The ssl module now has support for server-side SNI, thanks to a ↵Antoine Pitrou2013-01-051-2/+136
| | | | | | | | | | | | | | | | | | :meth:`SSLContext.set_servername_callback` method. Patch by Daniel Black.
* | | Forward port new test for SSLSocket.connect_ex()Antoine Pitrou2012-12-281-0/+11
|\ \ \ | |/ /
| * | Forward port new test for SSLSocket.connect_ex()Antoine Pitrou2012-12-281-0/+11
| |\ \ | | |/
| | * Forward port new test for SSLSocket.connect_ex()Antoine Pitrou2012-12-281-0/+11
| | |\
| | | * Backport Python 3.2 fix for issue #12065, and add another test for ↵Antoine Pitrou2012-12-281-0/+28
| | | | | | | | | | | | | | | | SSLSocket.connect_ex().
| | | * Closes #15793: Stack corruption in ssl.RAND_egd(). Python 2.7 hasn't any ↵Jesus Cea2012-09-101-6/+2
| | | | | | | | | | | | | | | | issue about this, but add a test just to be sure
| | | * Skip test_algorithms (known remote hosts need SNI, which is only available ↵Antoine Pitrou2012-05-041-1/+2
| | | | | | | | | | | | | | | | on 3.2+)
| | | * Fix intermittent test_ssl failure.Antoine Pitrou2012-01-271-0/+1
| | | |
| | | * Issue #13636: Weak ciphers are now disabled by default in the ssl moduleAntoine Pitrou2012-01-031-1/+24
| | | | | | | | | | | | | | | | (except when SSLv2 is explicitly asked for).
| | | * Use context managers in test_ssl to simplify test writing.Antoine Pitrou2011-12-211-64/+38
| | | |
| | | * Backout redundant changeset 1de4d92cd6a4Antoine Pitrou2011-10-311-2/+0
| | | |
| | | * test_protocol_sslv2(): Skip this test if ssl.PROTOCOL_SSLv2 is notBarry Warsaw2011-10-311-0/+2
| | | | | | | | | | | | | | | | defined (as is the case with Ubuntu 11.10).
| | | * Remove unstable SSL tests in the absence of ssl.OP_NO_{SSLv2,SSLv3,TLSv1}Antoine Pitrou2011-10-301-12/+2
| | | |
| | | * - Issue #13218: Fix test_ssl failures on Debian/Ubuntu.Barry Warsaw2011-10-281-2/+4
| | | |
| | | * Issue #13034: When decoding some SSL certificates, the subjectAltName ↵Antoine Pitrou2011-10-011-2/+22
| | | | | | | | | | | | | | | | extension could be unreported.
| | | * Issue #12012: test_ssl uses test_support.import_module()Victor Stinner2011-05-221-9/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Skip the whole file if the SSL module is missing. It was already the case, except that the SkipTest exception was raised in test_main(). This commit fixes an error in test_ssl if the ssl module is missing.
| | | * (Merge 3.1) Issue #12012: ssl.PROTOCOL_SSLv2 becomes optionalVictor Stinner2011-05-091-22/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenSSL is now compiled with OPENSSL_NO_SSL2 defined (without the SSLv2 protocol) on Debian: fix the ssl module on Debian Testing and Debian Sid. Optimize also ssl.get_protocol_name(): speed does matter!
| | | * Merged revisions 88671 via svnmerge fromAntoine Pitrou2011-02-271-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88671 | antoine.pitrou | 2011-02-27 16:44:12 +0100 (dim., 27 févr. 2011) | 3 lines Follow up to r88664: non-blocking connect-ex() can return EWOULDBLOCK under Windows ........
| | | * Merged revisions 88664 via svnmerge fromAntoine Pitrou2011-02-261-0/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88664 | antoine.pitrou | 2011-02-27 00:24:06 +0100 (dim., 27 févr. 2011) | 4 lines Issue #11326: Add the missing connect_ex() implementation for SSL sockets, and make it work for non-blocking connects. ........
| | | * Merged revisions 87861,87863 via svnmerge fromAntoine Pitrou2011-01-081-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r87861 | antoine.pitrou | 2011-01-08 11:23:29 +0100 (sam., 08 janv. 2011) | 3 lines Fix test_ssl after r87849 ........ r87863 | antoine.pitrou | 2011-01-08 11:28:11 +0100 (sam., 08 janv. 2011) | 3 lines Add EHOSTUNREACH ('No route to host') to the errnos trapped by transient_internet(). ........