- 4b9df0d merge 3.4 (#23844) by Benjamin Peterson · 9 years ago
- a7eaf56 replace 512 bit dh key with a 2014 bit one (closes #23844) by Benjamin Peterson · 9 years ago
- 8490f5a Issue #23001: Few functions in modules mmap, ossaudiodev, socket, ssl, and by Serhiy Storchaka · 9 years ago
- 18987a1 Issue #20617: Remove unused import in test_ssl. by Berker Peksag · 9 years ago
- 4a0e147 Issue #20617: Remove unused import in test_ssl. by Berker Peksag · 9 years ago
- 3e2500d merge 3.4 by Benjamin Peterson · 9 years ago
- c3d9c5c adjust test_crl_check for trusted first being default by Benjamin Peterson · 9 years ago
- de8eca4 merge 3.4 by Benjamin Peterson · 9 years ago
- 990fcaa expose X509_V_FLAG_TRUSTED_FIRST by Benjamin Peterson · 9 years ago
- c481bfb Issue #23239: ssl.match_hostname() now supports matching of IP addresses. by Antoine Pitrou · 10 years ago
- 7aa4428 Issue #23345: merge from 3.4 by Ned Deily · 10 years ago
- 05784a7 Issue #23345: Prevent test_ssl failures with large OpenSSL patch level by Ned Deily · 10 years ago
- 8861502 prefer server alpn ordering over the client's by Benjamin Peterson · 10 years ago
- cca2732 add support for ALPN (closes #20188) by Benjamin Peterson · 10 years ago
- 1504292 enable cert validation in test by Benjamin Peterson · 10 years ago
- 23ef9fa trying again by Benjamin Peterson · 10 years ago
- e6838e0 reorder cipher prefs by Benjamin Peterson · 10 years ago
- 44c7779 drop 256 by Benjamin Peterson · 10 years ago
- 359f298 try using AES256 by Benjamin Peterson · 10 years ago
- 8791d69 fix assertions after ciphers were changed by Benjamin Peterson · 10 years ago
- f78b78a rc4 is a long time favorite by Benjamin Peterson · 10 years ago
- 438a8db everyone should support AES ciphers by Benjamin Peterson · 10 years ago
- 9f6ecea include some more ciphers by Benjamin Peterson · 10 years ago
- aacd524 force test server to speak tlsv1 by Benjamin Peterson · 10 years ago
- e27a421 remove apparently wrong assertion about des bit size by Benjamin Peterson · 10 years ago
- 4cb1781 expose the client's cipher suites from the handshake (closes #23186) by Benjamin Peterson · 10 years ago
- fcfed19 Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. The by Victor Stinner · 10 years ago
- 789b805 test_ssl: add more debug to investigate test_openssl_version() failure on by Victor Stinner · 10 years ago
- 3f7e064 Issue #22935: Fix test_ssl when the SSLv3 protocol is not supported by Victor Stinner · 10 years ago
- e32467c allow ssl module to compile if openssl doesn't support SSL 3 (closes #22935) by Benjamin Peterson · 10 years ago
- 7243b57 don't require OpenSSL SNI to pass hostname to ssl functions (#22921) by Benjamin Peterson · 10 years ago
- 648b862 Issue #22935: Fix test_ssl when the SSLv3 protocol is not supported by Victor Stinner · 10 years ago
- 22293df merge 3.4 (#22935) by Benjamin Peterson · 10 years ago
- beeb512 Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. The by Victor Stinner · 10 years ago
- f9284ae merge 3.4 (#22921) by Benjamin Peterson · 10 years ago
- 98e1b91 merge 3.4 by Benjamin Peterson · 10 years ago
- 1ea070e test that keyfile can be None by Benjamin Peterson · 10 years ago
- 1cca273 merge 3.4 (#22417) by Benjamin Peterson · 10 years ago
- 4ffb075 PEP 476: enable HTTPS certificate verification by default (#22417) by Benjamin Peterson · 10 years ago
- b1fdf47 Issue #21965: Add support for in-memory SSL to the ssl module. by Antoine Pitrou · 10 years ago
- 91b62c4 merge 3.4 by Benjamin Peterson · 10 years ago
- 91244e0 separate cert loading tests into Windows and non-Windows cases by Benjamin Peterson · 10 years ago
- 8b9cfa1 merge 3.4 (#22449) by Benjamin Peterson · 10 years ago
- 5915b0f also use openssl envvars to find certs on windows (closes #22449) by Benjamin Peterson · 10 years ago
- 47e4042 Issue #20421: Add a .version() method to SSL sockets exposing the actual protocol version in use. by Antoine Pitrou · 10 years ago
- 6e20460 Issue #21566: Make use of socket.listen() default backlog. by Charles-François Natali · 10 years ago
- 26408df Issue #21976: Fix test_ssl to accept LibreSSL version strings. by Antoine Pitrou · 10 years ago
- dfab935 Issue #21976: Fix test_ssl to accept LibreSSL version strings. by Antoine Pitrou · 10 years ago
- 915d141 fix issue #17552: add socket.sendfile() method allowing to send a file over a socket by using high-performance os.sendfile() on UNIX. Patch by Giampaolo Rodola'· by Giampaolo Rodola' · 10 years ago
- b4bebda Issue #20951: SSLSocket.send() now raises either SSLWantReadError or SSLWantWriteError on a non-blocking socket if the operation would block. Previously, it would return 0. by Antoine Pitrou · 10 years ago
- c695c95 Issue #19940: ssl.cert_time_to_seconds() now interprets the given time string in the UTC timezone (as specified in RFC 5280), not the local timezone. by Antoine Pitrou · 10 years ago
- 172f025 Issue #21068: The ssl.PROTOCOL* constants are now enum members. by Antoine Pitrou · 10 years ago
- c043061 Try to fix buildbot failures on old OpenSSLs (< 1.0.0) - followup to issue #21015 by Antoine Pitrou · 10 years ago
- 94a5b66 Issue #20896: ssl.get_server_certificate() now uses PROTOCOL_SSLv23, not PROTOCOL_SSLv3, for maximum compatibility. by Antoine Pitrou · 10 years ago
- 6a2ba94 Issue #21013: Enhance ssl.create_default_context() for server side contexts by Donald Stufft · 10 years ago
- 0bebbc3 Issue #21015: SSL contexts will now automatically select an elliptic curve for ECDH key exchange on OpenSSL 1.0.2 and later, and otherwise default to "prime256v1". by Antoine Pitrou · 10 years ago
- 10b93cc merge 3.3 (#20896) by Benjamin Peterson · 10 years ago
- ba44860 Try to fix test_ssl failures on some buildbots by Antoine Pitrou · 11 years ago
- 32c4915 Try to fix test_ssl failures on some buildbots by Antoine Pitrou · 11 years ago
- 78ace81 Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for. by Antoine Pitrou · 11 years ago
- cd3d7ca Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for. by Antoine Pitrou · 11 years ago
- 3e86ba4 Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data. by Antoine Pitrou · 11 years ago
- e6d2f15 Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data. by Antoine Pitrou · 11 years ago
- 36e96b8 (Merge 3.3) Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now by Victor Stinner · 11 years ago
- 1e81a39 Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now raise a by Victor Stinner · 11 years ago
- bd9cbb0 Issue #19919: Fix flacky SSL test. connect_ex() sometimes returns by Christian Heimes · 11 years ago
- de57074 Issue #19919: Fix flacky SSL test. connect_ex() sometimes returns by Christian Heimes · 11 years ago
- 575596e test_ssl: skip tests when SNI is not available by Christian Heimes · 11 years ago
- 8e7f394 Test SSLSock's context getter and setter by Christian Heimes · 11 years ago
- a02c69a add check_hostname arg to ssl._create_stdlib_context() by Christian Heimes · 11 years ago
- 1aa9a75 Issue #19509: Add SSLContext.check_hostname to match the peer's certificate by Christian Heimes · 11 years ago
- 67986f9 Issue #19735: Implement private function ssl._create_stdlib_context() to by Christian Heimes · 11 years ago
- 4c05b47 Issue #19689: Add ssl.create_default_context() factory function. It creates by Christian Heimes · 11 years ago
- 72d2850 Issue #19292: Add SSLContext.load_default_certs() to load default root CA by Christian Heimes · 11 years ago
- 2427b50 Issue #8813: X509_VERIFY_PARAM is only available on OpenSSL 0.9.8+ by Christian Heimes · 11 years ago
- 5398e1a Issue #19448: report name / NID in exception message of ASN1Object by Christian Heimes · 11 years ago
- c2d65e1 Issue #17134: check certs of CA and ROOT system store by Christian Heimes · 11 years ago
- 32f0c7a or VERIFY_CRL_CHECK_LEAF to verify_flags by Christian Heimes · 11 years ago
- 44109d7 Issue #17134: Finalize interface to Windows' certificate store. Cert and by Christian Heimes · 11 years ago
- d6dc952 one CERT_REQUIRED is enough by Christian Heimes · 11 years ago
- 2258779 Issue #8813: Add SSLContext.verify_flags to change the verification flags by Christian Heimes · 11 years ago
- bd3a7f9 Issue #18379: SSLSocket.getpeercert() returns CA issuer AIA fields, OCSP by Christian Heimes · 11 years ago
- efff706 Issue #18138: Implement cadata argument of SSLContext.load_verify_location() by Christian Heimes · 11 years ago
- a6bc95a Issue #19448: Add private API to SSL module to lookup ASN.1 objects by OID, NID, short name and long name. by Christian Heimes · 11 years ago
- 72c98d3 Issue #17997: Change behavior of ``ssl.match_hostname()`` to follow RFC 6125, by Georg Brandl · 11 years ago
- b89b5df merge with 3.3 by Georg Brandl · 11 years ago
- 20b8555 Issue #19095: SSLSocket.getpeercert() now raises ValueError when the SSL handshake hasn't been done. by Antoine Pitrou · 11 years ago
- 2769d44 Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X Tiger by Christian Heimes · 11 years ago
- 157c983 Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X Tiger by Christian Heimes · 11 years ago
- 6acbe2a Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork. by Christian Heimes · 11 years ago
- f77b4b2 Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork. by Christian Heimes · 11 years ago
- e06d47c Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes by Christian Heimes · 11 years ago
- 824f7f3 Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes by Christian Heimes · 11 years ago
- 2894073 test_ssl: use a bytestring here by Antoine Pitrou · 11 years ago
- 60a26e0 Issue #9177: Calling read() or write() now raises ValueError, not AttributeError, on a closed SSL socket. by Antoine Pitrou · 11 years ago
- 9a5395a Issue #18147: Add diagnostic functions to ssl.SSLContext(). by Christian Heimes · 11 years ago
- 9424bb4 Issue #18207: Fix test_ssl for some versions of OpenSSL that ignore seconds by Christian Heimes · 11 years ago
- 46bebee Issue #17134: Add ssl.enum_cert_store() as interface to Windows' cert store. by Christian Heimes · 11 years ago
- 6d7ad13 Issue #18143: Implement ssl.get_default_verify_paths() in order to debug by Christian Heimes · 11 years ago
- 636f93c Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099). by Antoine Pitrou · 11 years ago