classification
Title: Please by default enforce ssl certificate checking in modules that can have user's which *depend* on the security of the ssl connection.
Type: Stage:
Components: Versions:
process
Status: closed Resolution: duplicate
Dependencies: Superseder: some stdlib modules need to be updated to handle SSL certificate validation
View: 10441
Assigned To: Nosy List: asdfasdfasdfasdfasdfasdfasdf, orsenthil
Priority: normal Keywords:

Created on 2010-11-17 09:26 by asdfasdfasdfasdfasdfasdfasdf, last changed 2010-11-25 22:34 by orsenthil. This issue is now closed.

Messages (1)
msg121338 - (view) Author: david (asdfasdfasdfasdfasdfasdfasdf) Date: 2010-11-17 09:26
Please by default enforce ssl certificate checking in modules that can have user's which *depend* on the security of the ssl connection.

See https://bugs.launchpad.net/ubuntu/+source/offlineimap/+bug/675120
http://bugs.python.org/issue10274
http://bugs.python.org/issue1589

and http://seclists.org/oss-sec/2010/q4/33

So I will name the following modules(as a  starting point):
1. httplib http://docs.python.org/library/httplib.html
2. urllib http://docs.python.org/library/urllib.html
3. urllib2 http://docs.python.org/library/urllib2.html
4. imaplib http://docs.python.org/library/imaplib.html
History
Date User Action Args
2010-11-25 22:34:00orsenthilsetnosy: + orsenthil
2010-11-17 09:32:27ned.deilysetstatus: open -> closed
resolution: duplicate
superseder: some stdlib modules need to be updated to handle SSL certificate validation
2010-11-17 09:26:26asdfasdfasdfasdfasdfasdfasdfcreate