commit e0b4aa0f5c3c2b2c60f5d8b20cf291442a8df8a5
author Chris Burr <chrisburr@users.noreply.github.com> Thu Mar 18 09:24:01 2021 +0100
committer GitHub <noreply@github.com> Thu Mar 18 01:24:01 2021 -0700
tree f2b692769abf47231b9484a73122f9c369c32c30
parent e0bf70d08c4a4a68782702e747e6bf7670667591

bpo-39342: Expose X509_V_FLAG_ALLOW_PROXY_CERTS in ssl module (GH-18011)



Exposes the `X509_V_FLAG_ALLOW_PROXY_CERTS` constant as `ssl.VERIFY_ALLOW_PROXY_CERTS` to allow for proxy certificate validation as described in: https://www.openssl.org/docs/man1.1.1/man7/proxy-certificates.html

Modules/_ssl.c

diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 96d2796..bea144c 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -6181,6 +6181,8 @@ sslmodule_init_constants(PyObject *m)
                             X509_V_FLAG_CRL_CHECK|X509_V_FLAG_CRL_CHECK_ALL);
     PyModule_AddIntConstant(m, "VERIFY_X509_STRICT",
                             X509_V_FLAG_X509_STRICT);
+    PyModule_AddIntConstant(m, "VERIFY_ALLOW_PROXY_CERTS",
+                            X509_V_FLAG_ALLOW_PROXY_CERTS);
 #ifdef X509_V_FLAG_TRUSTED_FIRST
     PyModule_AddIntConstant(m, "VERIFY_X509_TRUSTED_FIRST",
                             X509_V_FLAG_TRUSTED_FIRST);