| commit | ec3c103520a5061e657581b388e2b8ba6f74602a | [log] [tgz] |
|---|---|---|
| author | Georg Brandl <georg@python.org> | Tue Sep 30 14:04:51 2014 +0200 |
| committer | Georg Brandl <georg@python.org> | Tue Sep 30 14:04:51 2014 +0200 |
| tree | c772344d220e21c83b181972a0e22e9caf8180ba | |
| parent | 79690ac1d0b25c048768e9d3870b475e235f9e7a [diff] |
Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes inside subjectAltName correctly. Formerly the module has used OpenSSL's GENERAL_NAME_print() function to get the string represention of ASN.1 strings for ``rfc822Name`` (email), ``dNSName`` (DNS) and ``uniformResourceIdentifier`` (URI).