This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title: add wrapper for SSL_CTX_set_default_verify_paths
Type: enhancement Stage: resolved
Components: Library (Lib) Versions: Python 3.2
process
Status: closed Resolution: fixed
Dependencies: Superseder:
Assigned To: Nosy List: pitrou
Priority: normal Keywords: patch

Created on 2010-11-17 12:04 by pitrou, last changed 2022-04-11 14:57 by admin. This issue is now closed.

Files
File name Uploaded Description Edit
default_verify_paths.patch pitrou, 2010-11-17 17:44
Messages (3)
msg121351 - (view) Author: Antoine Pitrou (pitrou) * (Python committer) Date: 2010-11-17 12:04
SSL_CTX_set_default_verify_paths allows to select the system-wide CA certificates on an SSL context, if OpenSSL was built with the right options.

We could also try to expose those default paths by calling X509_get_default_cert_file() / X509_get_default_cert_dir(), but these seem even less documented (private?).
msg121366 - (view) Author: Antoine Pitrou (pitrou) * (Python committer) Date: 2010-11-17 17:44
Here is a patch.
msg121380 - (view) Author: Antoine Pitrou (pitrou) * (Python committer) Date: 2010-11-17 20:29
Committed in r86498.
History
Date User Action Args
2022-04-11 14:57:09adminsetgithub: 54652
2010-11-17 20:29:57pitrousetstatus: open -> closed
resolution: fixed
messages: + msg121380

stage: patch review -> resolved
2010-11-17 17:44:39pitrousetfiles: + default_verify_paths.patch
keywords: + patch
messages: + msg121366

stage: patch review
2010-11-17 12:04:46pitroucreate