This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author christian.heimes
Recipients christian.heimes, jcea, maker, underrun
Date 2013-07-20.23:42:19
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <>
From Rietveld review:

Modules/_ssl.c:1203: chain = X509_STORE_CTX_get1_chain(store_ctx);
This isn't appropriate for this method. Specifically, you are asking for
the peer cert chain, which purposefully does not include root CA certs
that you trust. What you are giving here a complete validate chain from
a peer cert to a trusted root. This is a valuable piece of information,
but should be returned via another method (perhaps exposed in python as
get1chain in SSLContext). But this method should always return the
result of SSL_get_peer_cert_chain if a peer cert chain is available.

You are making a good point. I'm either going to split it up into two function or provide a way to look up a cert by issuer.
Date User Action Args
2013-07-20 23:42:20christian.heimessetrecipients: + christian.heimes, jcea, maker, underrun
2013-07-20 23:42:20christian.heimessetmessageid: <>
2013-07-20 23:42:20christian.heimeslinkissue18233 messages
2013-07-20 23:42:19christian.heimescreate