➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title: Add support for retrieving the certificate chain
Type: enhancement Stage:
Components: Library (Lib) Versions: Python 3.6, Python 3.5, Python 2.7
process
Status: open Resolution:
Dependencies: Superseder:
Assigned To: Nosy List: Lukasa, alex, christian.heimes, dstufft, giampaolo.rodola, icordasc, janssen, pitrou, rugk
Priority: normal Keywords:

Created on 2015-05-01 17:45 by Lukasa, last changed 2022-04-11 14:58 by admin.

Messages (3)
msg242341 - (view) Author: Cory Benfield (Lukasa) * Date: 2015-05-01 17:45 
In order to perform HTTP Public Key Pinning (HPKP), it's necessary to have access to every certificate in the certificate trust chain. This is because the pinned key may actually be an intermediate or root certificate, rather than the leaf certificate.

PyOpenSSL offers this functionality, and it ought to be a relatively simple enhancement to expose the equivalent function in the stdlib.

For more background, see the urllib3 issue tracking the HPKP feature: https://github.com/shazow/urllib3/pull/607
msg242342 - (view) Author: Christian Heimes (christian.heimes) * (Python committer) Date: 2015-05-01 17:50 
I have an experimental branch that adds the feature and also exposes the subject public key information.

https://github.com/tiran/cpython/tree/feature/x509cert
msg268210 - (view) Author: (rugk) Date: 2016-06-11 13:29 
Is this issue the same as https://bugs.python.org/issue25529?
History
Date User Action Args
2022-04-11 14:58:16adminsetgithub: 68295
2016-06-11 14:22:09berker.peksaglinkissue25529 superseder
2016-06-11 13:29:40rugksetmessages: + msg268210
2016-06-11 13:29:11rugksetnosy: + rugk
2015-05-01 18:11:54icordascsetnosy: + icordasc
2015-05-01 17:50:32christian.heimessetmessages: + msg242342
2015-05-01 17:46:17alexsetnosy: + janssen, pitrou, giampaolo.rodola, christian.heimes, alex, dstufft
2015-05-01 17:45:25Lukasacreate