| commit | f0f5930ac88482ef896283db5be9b8d508d077db | [log] [tgz] |
|---|---|---|
| author | Christian Heimes <christian@python.org> | Mon Jul 01 08:29:17 2019 +0200 |
| committer | Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> | Sun Jun 30 23:29:17 2019 -0700 |
| tree | 1dbfd07ab81c76c959ac6b461093ac55d8b3bd84 | |
| parent | 12b436e3b079fb3e3a7197c089df90a77e3bdd77 [diff] |
bpo-37428: Don't set PHA verify flag on client side (GH-14421) SSLContext.post_handshake_auth = True no longer sets SSL_VERIFY_POST_HANDSHAKE verify flag for client connections. Although the option is documented as ignored for clients, OpenSSL implicitly enables cert chain validation when the flag is set. Signed-off-by: Christian Heimes <christian@python.org> https://bugs.python.org/issue37428