This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author DK26
Recipients DK26, christian.heimes
Date 2019-08-13.18:33:23
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1565721204.27.0.66064229859.issue37845@roundup.psfhosted.org>
In-reply-to
Content
Unable to establish SSL connections using company's private certificates where their SANs (Subject Alternative Names) contain at least one DNS Name that starts with white spaces.

Attempting to establish SSL connection would result in Exception:
SSLCertVerificationError("partial wildcards in leftmost label are not supported: '   *.x.y.com'.")

This situation made us co-depended on SecOps in a big company where ultimately all other none-python apps weren't effected by that change they made and thus couldn't or wouldn't fix the problem on their side for us. (We were at their mercy!)


I originally encountered this bug @ Python 3.7 and fixed it manually on my own local Python environment.

As the bug seems to be still unfixed to date, I publish this issue.

A small and simple fix will follow shortly on github.
History
Date User Action Args
2019-08-13 18:33:24DK26setrecipients: + DK26, christian.heimes
2019-08-13 18:33:24DK26setmessageid: <1565721204.27.0.66064229859.issue37845@roundup.psfhosted.org>
2019-08-13 18:33:24DK26linkissue37845 messages
2019-08-13 18:33:23DK26create