Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose X509_V_FLAG_ALLOW_PROXY_CERTS in ssl #83523

Closed
chrisburr mannequin opened this issue Jan 15, 2020 · 3 comments
Closed

Expose X509_V_FLAG_ALLOW_PROXY_CERTS in ssl #83523

chrisburr mannequin opened this issue Jan 15, 2020 · 3 comments
Assignees
Labels
3.10 only security fixes topic-SSL type-feature A feature request or enhancement

Comments

@chrisburr
Copy link
Mannequin

chrisburr mannequin commented Jan 15, 2020

BPO 39342
Nosy @tiran, @miss-islington, @chrisburr
PRs
  • bpo-39342: Expose X509_V_FLAG_ALLOW_PROXY_CERTS in ssl module #18011
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/tiran'
    closed_at = <Date 2021-03-18.08:24:31.416>
    created_at = <Date 2020-01-15.10:03:00.505>
    labels = ['expert-SSL', 'type-feature', '3.10']
    title = 'Expose X509_V_FLAG_ALLOW_PROXY_CERTS in ssl'
    updated_at = <Date 2021-03-18.08:24:31.415>
    user = 'https://github.com/chrisburr'

    bugs.python.org fields:

    activity = <Date 2021-03-18.08:24:31.415>
    actor = 'christian.heimes'
    assignee = 'christian.heimes'
    closed = True
    closed_date = <Date 2021-03-18.08:24:31.416>
    closer = 'christian.heimes'
    components = ['SSL']
    creation = <Date 2020-01-15.10:03:00.505>
    creator = 'chrisburr'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 39342
    keywords = ['patch']
    message_count = 3.0
    messages = ['360035', '388995', '388996']
    nosy_count = 3.0
    nosy_names = ['christian.heimes', 'miss-islington', 'chrisburr']
    pr_nums = ['18011']
    priority = 'normal'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'enhancement'
    url = 'https://bugs.python.org/issue39342'
    versions = ['Python 3.10']

    @chrisburr
    Copy link
    Mannequin Author

    chrisburr mannequin commented Jan 15, 2020

    Enabling proxy certificate validation requires X509_V_FLAG_ALLOW_PROXY_CERTS to be included in the verify flags.[1] This should be exposed as ssl.VERIFY_ALLOW_PROXY_CERTS to match with the other X509_V_FLAG_* variables.

    https://www.openssl.org/docs/man1.1.1/man7/proxy-certificates.html

    @chrisburr chrisburr mannequin added stdlib Python modules in the Lib dir 3.9 only security fixes type-feature A feature request or enhancement topic-SSL and removed stdlib Python modules in the Lib dir labels Jan 15, 2020
    @chrisburr chrisburr mannequin assigned tiran Jan 15, 2020
    @chrisburr chrisburr mannequin added topic-SSL and removed stdlib Python modules in the Lib dir labels Jan 15, 2020
    @chrisburr chrisburr mannequin assigned tiran Jan 15, 2020
    @chrisburr chrisburr mannequin added 3.10 only security fixes and removed 3.9 only security fixes labels Oct 12, 2020
    @miss-islington
    Copy link
    Contributor

    New changeset e0b4aa0 by Chris Burr in branch 'master':
    bpo-39342: Expose X509_V_FLAG_ALLOW_PROXY_CERTS in ssl module (GH-18011)
    e0b4aa0

    @tiran
    Copy link
    Member

    tiran commented Mar 18, 2021

    Thanks for the PR!

    @tiran tiran closed this as completed Mar 18, 2021
    @tiran tiran closed this as completed Mar 18, 2021
    @ezio-melotti ezio-melotti transferred this issue from another repository Apr 10, 2022
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    3.10 only security fixes topic-SSL type-feature A feature request or enhancement
    Projects
    None yet
    Development

    No branches or pull requests

    2 participants