1. 4b9df0d merge 3.4 (#23844) by Benjamin Peterson · 9 years ago
  2. a7eaf56 replace 512 bit dh key with a 2014 bit one (closes #23844) by Benjamin Peterson · 9 years ago
  3. 8490f5a Issue #23001: Few functions in modules mmap, ossaudiodev, socket, ssl, and by Serhiy Storchaka · 9 years ago
  4. 18987a1 Issue #20617: Remove unused import in test_ssl. by Berker Peksag · 9 years ago
  5. 4a0e147 Issue #20617: Remove unused import in test_ssl. by Berker Peksag · 9 years ago
  6. 3e2500d merge 3.4 by Benjamin Peterson · 9 years ago
  7. c3d9c5c adjust test_crl_check for trusted first being default by Benjamin Peterson · 9 years ago
  8. de8eca4 merge 3.4 by Benjamin Peterson · 9 years ago
  9. 990fcaa expose X509_V_FLAG_TRUSTED_FIRST by Benjamin Peterson · 9 years ago
  10. c481bfb Issue #23239: ssl.match_hostname() now supports matching of IP addresses. by Antoine Pitrou · 10 years ago
  11. 7aa4428 Issue #23345: merge from 3.4 by Ned Deily · 10 years ago
  12. 05784a7 Issue #23345: Prevent test_ssl failures with large OpenSSL patch level by Ned Deily · 10 years ago
  13. 8861502 prefer server alpn ordering over the client's by Benjamin Peterson · 10 years ago
  14. cca2732 add support for ALPN (closes #20188) by Benjamin Peterson · 10 years ago
  15. 1504292 enable cert validation in test by Benjamin Peterson · 10 years ago
  16. 23ef9fa trying again by Benjamin Peterson · 10 years ago
  17. e6838e0 reorder cipher prefs by Benjamin Peterson · 10 years ago
  18. 44c7779 drop 256 by Benjamin Peterson · 10 years ago
  19. 359f298 try using AES256 by Benjamin Peterson · 10 years ago
  20. 8791d69 fix assertions after ciphers were changed by Benjamin Peterson · 10 years ago
  21. f78b78a rc4 is a long time favorite by Benjamin Peterson · 10 years ago
  22. 438a8db everyone should support AES ciphers by Benjamin Peterson · 10 years ago
  23. 9f6ecea include some more ciphers by Benjamin Peterson · 10 years ago
  24. aacd524 force test server to speak tlsv1 by Benjamin Peterson · 10 years ago
  25. e27a421 remove apparently wrong assertion about des bit size by Benjamin Peterson · 10 years ago
  26. 4cb1781 expose the client's cipher suites from the handshake (closes #23186) by Benjamin Peterson · 10 years ago
  27. fcfed19 Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. The by Victor Stinner · 10 years ago
  28. 789b805 test_ssl: add more debug to investigate test_openssl_version() failure on by Victor Stinner · 10 years ago
  29. 3f7e064 Issue #22935: Fix test_ssl when the SSLv3 protocol is not supported by Victor Stinner · 10 years ago
  30. e32467c allow ssl module to compile if openssl doesn't support SSL 3 (closes #22935) by Benjamin Peterson · 10 years ago
  31. 7243b57 don't require OpenSSL SNI to pass hostname to ssl functions (#22921) by Benjamin Peterson · 10 years ago
  32. 648b862 Issue #22935: Fix test_ssl when the SSLv3 protocol is not supported by Victor Stinner · 10 years ago
  33. 22293df merge 3.4 (#22935) by Benjamin Peterson · 10 years ago
  34. beeb512 Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. The by Victor Stinner · 10 years ago
  35. f9284ae merge 3.4 (#22921) by Benjamin Peterson · 10 years ago
  36. 98e1b91 merge 3.4 by Benjamin Peterson · 10 years ago
  37. 1ea070e test that keyfile can be None by Benjamin Peterson · 10 years ago
  38. 1cca273 merge 3.4 (#22417) by Benjamin Peterson · 10 years ago
  39. 4ffb075 PEP 476: enable HTTPS certificate verification by default (#22417) by Benjamin Peterson · 10 years ago
  40. b1fdf47 Issue #21965: Add support for in-memory SSL to the ssl module. by Antoine Pitrou · 10 years ago
  41. 91b62c4 merge 3.4 by Benjamin Peterson · 10 years ago
  42. 91244e0 separate cert loading tests into Windows and non-Windows cases by Benjamin Peterson · 10 years ago
  43. 8b9cfa1 merge 3.4 (#22449) by Benjamin Peterson · 10 years ago
  44. 5915b0f also use openssl envvars to find certs on windows (closes #22449) by Benjamin Peterson · 10 years ago
  45. 47e4042 Issue #20421: Add a .version() method to SSL sockets exposing the actual protocol version in use. by Antoine Pitrou · 10 years ago
  46. 6e20460 Issue #21566: Make use of socket.listen() default backlog. by Charles-François Natali · 10 years ago
  47. 26408df Issue #21976: Fix test_ssl to accept LibreSSL version strings. by Antoine Pitrou · 10 years ago
  48. dfab935 Issue #21976: Fix test_ssl to accept LibreSSL version strings. by Antoine Pitrou · 10 years ago
  49. 915d141 fix issue #17552: add socket.sendfile() method allowing to send a file over a socket by using high-performance os.sendfile() on UNIX. Patch by Giampaolo Rodola'· by Giampaolo Rodola' · 10 years ago
  50. b4bebda Issue #20951: SSLSocket.send() now raises either SSLWantReadError or SSLWantWriteError on a non-blocking socket if the operation would block. Previously, it would return 0. by Antoine Pitrou · 10 years ago
  51. c695c95 Issue #19940: ssl.cert_time_to_seconds() now interprets the given time string in the UTC timezone (as specified in RFC 5280), not the local timezone. by Antoine Pitrou · 10 years ago
  52. 172f025 Issue #21068: The ssl.PROTOCOL* constants are now enum members. by Antoine Pitrou · 10 years ago
  53. c043061 Try to fix buildbot failures on old OpenSSLs (< 1.0.0) - followup to issue #21015 by Antoine Pitrou · 10 years ago
  54. 94a5b66 Issue #20896: ssl.get_server_certificate() now uses PROTOCOL_SSLv23, not PROTOCOL_SSLv3, for maximum compatibility. by Antoine Pitrou · 10 years ago
  55. 6a2ba94 Issue #21013: Enhance ssl.create_default_context() for server side contexts by Donald Stufft · 10 years ago
  56. 0bebbc3 Issue #21015: SSL contexts will now automatically select an elliptic curve for ECDH key exchange on OpenSSL 1.0.2 and later, and otherwise default to "prime256v1". by Antoine Pitrou · 10 years ago
  57. 10b93cc merge 3.3 (#20896) by Benjamin Peterson · 10 years ago
  58. ba44860 Try to fix test_ssl failures on some buildbots by Antoine Pitrou · 11 years ago
  59. 32c4915 Try to fix test_ssl failures on some buildbots by Antoine Pitrou · 11 years ago
  60. 78ace81 Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for. by Antoine Pitrou · 11 years ago
  61. cd3d7ca Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for. by Antoine Pitrou · 11 years ago
  62. 3e86ba4 Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data. by Antoine Pitrou · 11 years ago
  63. e6d2f15 Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data. by Antoine Pitrou · 11 years ago
  64. 36e96b8 (Merge 3.3) Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now by Victor Stinner · 11 years ago
  65. 1e81a39 Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now raise a by Victor Stinner · 11 years ago
  66. bd9cbb0 Issue #19919: Fix flacky SSL test. connect_ex() sometimes returns by Christian Heimes · 11 years ago
  67. de57074 Issue #19919: Fix flacky SSL test. connect_ex() sometimes returns by Christian Heimes · 11 years ago
  68. 575596e test_ssl: skip tests when SNI is not available by Christian Heimes · 11 years ago
  69. 8e7f394 Test SSLSock's context getter and setter by Christian Heimes · 11 years ago
  70. a02c69a add check_hostname arg to ssl._create_stdlib_context() by Christian Heimes · 11 years ago
  71. 1aa9a75 Issue #19509: Add SSLContext.check_hostname to match the peer's certificate by Christian Heimes · 11 years ago
  72. 67986f9 Issue #19735: Implement private function ssl._create_stdlib_context() to by Christian Heimes · 11 years ago
  73. 4c05b47 Issue #19689: Add ssl.create_default_context() factory function. It creates by Christian Heimes · 11 years ago
  74. 72d2850 Issue #19292: Add SSLContext.load_default_certs() to load default root CA by Christian Heimes · 11 years ago
  75. 2427b50 Issue #8813: X509_VERIFY_PARAM is only available on OpenSSL 0.9.8+ by Christian Heimes · 11 years ago
  76. 5398e1a Issue #19448: report name / NID in exception message of ASN1Object by Christian Heimes · 11 years ago
  77. c2d65e1 Issue #17134: check certs of CA and ROOT system store by Christian Heimes · 11 years ago
  78. 32f0c7a or VERIFY_CRL_CHECK_LEAF to verify_flags by Christian Heimes · 11 years ago
  79. 44109d7 Issue #17134: Finalize interface to Windows' certificate store. Cert and by Christian Heimes · 11 years ago
  80. d6dc952 one CERT_REQUIRED is enough by Christian Heimes · 11 years ago
  81. 2258779 Issue #8813: Add SSLContext.verify_flags to change the verification flags by Christian Heimes · 11 years ago
  82. bd3a7f9 Issue #18379: SSLSocket.getpeercert() returns CA issuer AIA fields, OCSP by Christian Heimes · 11 years ago
  83. efff706 Issue #18138: Implement cadata argument of SSLContext.load_verify_location() by Christian Heimes · 11 years ago
  84. a6bc95a Issue #19448: Add private API to SSL module to lookup ASN.1 objects by OID, NID, short name and long name. by Christian Heimes · 11 years ago
  85. 72c98d3 Issue #17997: Change behavior of ``ssl.match_hostname()`` to follow RFC 6125, by Georg Brandl · 11 years ago
  86. b89b5df merge with 3.3 by Georg Brandl · 11 years ago
  87. 20b8555 Issue #19095: SSLSocket.getpeercert() now raises ValueError when the SSL handshake hasn't been done. by Antoine Pitrou · 11 years ago
  88. 2769d44 Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X Tiger by Christian Heimes · 11 years ago
  89. 157c983 Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X Tiger by Christian Heimes · 11 years ago
  90. 6acbe2a Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork. by Christian Heimes · 11 years ago
  91. f77b4b2 Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork. by Christian Heimes · 11 years ago
  92. e06d47c Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes by Christian Heimes · 11 years ago
  93. 824f7f3 Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes by Christian Heimes · 11 years ago
  94. 2894073 test_ssl: use a bytestring here by Antoine Pitrou · 11 years ago
  95. 60a26e0 Issue #9177: Calling read() or write() now raises ValueError, not AttributeError, on a closed SSL socket. by Antoine Pitrou · 11 years ago
  96. 9a5395a Issue #18147: Add diagnostic functions to ssl.SSLContext(). by Christian Heimes · 11 years ago
  97. 9424bb4 Issue #18207: Fix test_ssl for some versions of OpenSSL that ignore seconds by Christian Heimes · 11 years ago
  98. 46bebee Issue #17134: Add ssl.enum_cert_store() as interface to Windows' cert store. by Christian Heimes · 11 years ago
  99. 6d7ad13 Issue #18143: Implement ssl.get_default_verify_paths() in order to debug by Christian Heimes · 11 years ago
  100. 636f93c Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099). by Antoine Pitrou · 11 years ago