- 0bebbc3 Issue #21015: SSL contexts will now automatically select an elliptic curve for ECDH key exchange on OpenSSL 1.0.2 and later, and otherwise default to "prime256v1". by Antoine Pitrou · 10 years ago
- 83fed26 avoid a compiler warning about assigning const char * to char *. by Gregory P. Smith · 11 years ago
- f348909 avoid a compiler warning about assigning const char * to char *. by Gregory P. Smith · 11 years ago
- 78ace81 Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for. by Antoine Pitrou · 11 years ago
- 2f7c316 Remove conditional: it is useless at this point (OpenSSL headers are not yet included) by Antoine Pitrou · 11 years ago
- cd3d7ca Issue #20207: Always disable SSLv2 except when PROTOCOL_SSLv2 is explicitly asked for. by Antoine Pitrou · 11 years ago
- 36e96b8 (Merge 3.3) Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now by Victor Stinner · 11 years ago
- 1e81a39 Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now raise a by Victor Stinner · 11 years ago
- 1aa9a75 Issue #19509: Add SSLContext.check_hostname to match the peer's certificate by Christian Heimes · 11 years ago
- 470fba1 SNI was added in OpenSSL 0.9.8f [11 Oct 2007], too by Christian Heimes · 11 years ago
- 2427b50 Issue #8813: X509_VERIFY_PARAM is only available on OpenSSL 0.9.8+ by Christian Heimes · 11 years ago
- 5398e1a Issue #19448: report name / NID in exception message of ASN1Object by Christian Heimes · 11 years ago
- f22e8e5 Issue #18147: Add missing documentation for SSLContext.get_ca_certs(). by Christian Heimes · 11 years ago
- 44109d7 Issue #17134: Finalize interface to Windows' certificate store. Cert and by Christian Heimes · 11 years ago
- 1dbf61f downcast len to int. The code has already checked that len < INT_MAX by Christian Heimes · 11 years ago
- 18fc7be lst might be NULL here by Christian Heimes · 11 years ago
- 2258779 Issue #8813: Add SSLContext.verify_flags to change the verification flags by Christian Heimes · 11 years ago
- 949ec14 Issue #19682: Fix compatibility issue with old version of OpenSSL that by Christian Heimes · 11 years ago
- bd3a7f9 Issue #18379: SSLSocket.getpeercert() returns CA issuer AIA fields, OCSP by Christian Heimes · 11 years ago
- efff706 Issue #18138: Implement cadata argument of SSLContext.load_verify_location() by Christian Heimes · 11 years ago
- b08ff7d Safely downcast SOCKET_T to int in _ssl module by Christian Heimes · 11 years ago
- a6bc95a Issue #19448: Add private API to SSL module to lookup ASN.1 objects by OID, NID, short name and long name. by Christian Heimes · 11 years ago
- a9eb38f Issue #19437: Fix newPySSLSocket(), handle PyWeakref_NewRef() failure by Victor Stinner · 11 years ago
- ba9be47 Issue #19437: Fix fill_and_set_sslerror() of _ssl, handle Py_BuildValue() by Victor Stinner · 11 years ago
- ee0bac6 Issue #19227 / Issue #18747: Remove pthread_atfork() handler to remove OpenSSL re-seeding by Christian Heimes · 11 years ago
- fb6b44e Issue #19227 / Issue #18747: Remove pthread_atfork() handler to remove OpenSSL re-seeding by Christian Heimes · 11 years ago
- 81be27d Issue #19227: Try to fix deadlocks caused by re-seeding then OpenSSL by Georg Brandl · 11 years ago
- fb404f5 #19227: merge with 3.3 by Georg Brandl · 11 years ago
- b2201e1 Properly initialize all fields of a SSL object after allocation. by Antoine Pitrou · 11 years ago
- 860aee7 Properly initialize all fields of a SSL object after allocation. by Antoine Pitrou · 11 years ago
- 20b8555 Issue #19095: SSLSocket.getpeercert() now raises ValueError when the SSL handshake hasn't been done. by Antoine Pitrou · 11 years ago
- 2d7aba3 Issue #18709: GCC 4.6 complains that 'v' may be used uninitialized in GEN_EMAIL/GEN_URI/GEN_DNS case by Christian Heimes · 11 years ago
- 60bf2fc Issue #18709: GCC 4.6 complains that 'v' may be used uninitialized in GEN_EMAIL/GEN_URI/GEN_DNS case by Christian Heimes · 11 years ago
- daf4555 Issue #18571: Implementation of the PEP 446: file descriptors and file handles by Victor Stinner · 11 years ago
- cfa4796 Issue #18747: Fix spelling errors in my commit message and comments, by Christian Heimes · 11 years ago
- 61636e7 Issue #18747: Fix spelling errors in my commit message and comments, by Christian Heimes · 11 years ago
- cabbde9 Fix compiler warning on Windows. by Richard Oudkerk · 11 years ago
- f54c246 Issue #18747: Use a parent atfork handler instead of a child atfork handler. by Christian Heimes · 11 years ago
- 80c5de9 Issue #18747: Use a parent atfork handler instead of a child atfork handler. by Christian Heimes · 11 years ago
- 6acbe2a Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork. by Christian Heimes · 11 years ago
- f77b4b2 Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork. by Christian Heimes · 11 years ago
- 85532eb Issue #18777: The ssl module now uses the new CRYPTO_THREADID API of by Christian Heimes · 11 years ago
- 4d98ca9 Issue #18777: The ssl module now uses the new CRYPTO_THREADID API of by Christian Heimes · 11 years ago
- f920a1c Issue 18768: Correct doc string of RAND_edg(). Patch by Vajrasky Kok. by Christian Heimes · 11 years ago
- 3c2593b Issue 18768: Correct doc string of RAND_edg(). Patch by Vajrasky Kok. by Christian Heimes · 11 years ago
- 9b5907c Issue #18768: coding style nitpick. Thanks to Vajrasky Kok by Christian Heimes · 11 years ago
- 474afdd Issue #18768: coding style nitpick. Thanks to Vajrasky Kok by Christian Heimes · 11 years ago
- a7e7497 #18466: merge with 3.3. by Ezio Melotti · 11 years ago
- 85a8629 #18466: fix more typos. Patch by Févry Thibault. by Ezio Melotti · 11 years ago
- e06d47c Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes by Christian Heimes · 11 years ago
- 824f7f3 Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes by Christian Heimes · 11 years ago
- 9bfcaa6 Check return value of PyLong_FromLong(X509_get_version()). It might be NULL if by Christian Heimes · 11 years ago
- 5962bef Check return value of PyLong_FromLong(X509_get_version()). It might be NULL if by Christian Heimes · 11 years ago
- 11ebff2 Issue #18203: Replace malloc() with PyMem_Malloc() in _ssl for the password by Victor Stinner · 11 years ago
- b640491 Issue #18203: Replace malloc() with PyMem_Malloc() in Python modules by Victor Stinner · 11 years ago
- 7e00151 _ssl.c: strip trailing spaces by Victor Stinner · 11 years ago
- 86073dc (Merge 3.3) Issue #18135: ssl.SSLSocket.write() now raises an OverflowError if by Victor Stinner · 11 years ago
- 6efa965 Issue #18135: ssl.SSLSocket.write() now raises an OverflowError if the input by Victor Stinner · 11 years ago
- 8cfd67c (Merge 3.3) Issue #18135: Fix a possible integer overflow in by Victor Stinner · 11 years ago
- 9ee0203 Issue #18135: Fix a possible integer overflow in ssl.SSLSocket.write() by Victor Stinner · 11 years ago
- 4569cd5 _ssl.c: strip trailing spaces by Victor Stinner · 11 years ago
- 9a5395a Issue #18147: Add diagnostic functions to ssl.SSLContext(). by Christian Heimes · 11 years ago
- 200bb1b Simplify return value of ssl.get_default_verify_paths by Christian Heimes · 11 years ago
- 75b8426 fixd refleak by Christian Heimes · 11 years ago
- 46bebee Issue #17134: Add ssl.enum_cert_store() as interface to Windows' cert store. by Christian Heimes · 11 years ago
- 142ec2c get_default_verify_paths doesn't belong inside the ifdef block by Christian Heimes · 11 years ago
- 6d7ad13 Issue #18143: Implement ssl.get_default_verify_paths() in order to debug by Christian Heimes · 11 years ago
- 19fef69 Fix compilation under MSVC: ssl_set_mode() is a macro, and the MSVC preprocessor doesn't process #ifdef's inside a macro argument list. by Antoine Pitrou · 11 years ago
- 3a65ad7 Issue #8240: Set the SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER flag on SSL sockets. by Antoine Pitrou · 11 years ago
- 50b24d0 Fix a crash when setting a servername callback on a SSL server socket and the client doesn't send a server name. by Antoine Pitrou · 11 years ago
- ce852cb Fix comment about the OpenSSL version in which SNI version was introduced. by Antoine Pitrou · 11 years ago
- edbc18e Improve set_servername_callback docstring. by Antoine Pitrou · 11 years ago
- a596338 Fix previous fix (the cause was actually a misplaced #endif, or so it seems) by Antoine Pitrou · 11 years ago
- 41f8c4f Further compiling fixes (issue #17581) by Antoine Pitrou · 11 years ago
- 912fbff Issue #17581: try to fix building on old OpenSSL versions by Antoine Pitrou · 11 years ago
- 2463e5f Issue #16692: The ssl module now supports TLS 1.1 and TLS 1.2. Initial patch by Michele Orrù. by Antoine Pitrou · 11 years ago
- 20d6080 Issue #16982: Fix --without-threads build failure. by Stefan Krah · 12 years ago
- 1e37e9e SSLContext.load_dh_params() now properly closes the input file. by Antoine Pitrou · 12 years ago
- 457a229 SSLContext.load_dh_params() now properly closes the input file. by Antoine Pitrou · 12 years ago
- 5dd12a5 Fix returning uninitialized variable (issue #8109). by Antoine Pitrou · 12 years ago
- 58ddc9d Issue #8109: The ssl module now has support for server-side SNI, thanks to a :meth:`SSLContext.set_servername_callback` method. by Antoine Pitrou · 12 years ago
- 5cb31c9 Issue #15977: Fix memory leak in Modules/_ssl.c when the function _set_npn_protocols() is called multiple times by Christian Heimes · 12 years ago
- b7a2800 MERGE: Closes #15793: Stack corruption in ssl.RAND_egd() by Jesus Cea · 12 years ago
- c8754a1 Closes #15793: Stack corruption in ssl.RAND_egd() by Jesus Cea · 12 years ago
- 721738f Issue #15604: Update uses of PyObject_IsTrue() to check for and handle errors correctly. by Antoine Pitrou · 12 years ago
- 6f430e4 Issue #15604: Update uses of PyObject_IsTrue() to check for and handle errors correctly. by Antoine Pitrou · 12 years ago
- 3b36fb1 Issue #14837: SSL errors now have `library` and `reason` attributes describing precisely what happened and in which OpenSSL submodule. by Antoine Pitrou · 12 years ago
- d5d17eb Issue #14204: The ssl module now has support for the Next Protocol Negotiation extension, if available in the underlying OpenSSL library. by Antoine Pitrou · 12 years ago
- c135fa4 Fix last remaining build issues of _ssl under old OpenSSLs. Patch by Vinay. by Antoine Pitrou · 13 years ago
- a9bf2ac Try to really fix compilation failures of the _ssl module under very old OpenSSLs. by Antoine Pitrou · 13 years ago
- e9fccb3 Fix compilation when SSL_OP_SINGLE_ECDH_USE isn't defined by Antoine Pitrou · 13 years ago
- 04d4ee4 Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert(). by Antoine Pitrou · 13 years ago
- 2f5a163 Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert(). by Antoine Pitrou · 13 years ago
- 9e2e532 Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure. by Antoine Pitrou · 13 years ago
- 3f36631 Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure. by Antoine Pitrou · 13 years ago
- f2bf8a6 Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure. by Antoine Pitrou · 13 years ago
- 0e576f1 Issue #13626: Add support for SSL Diffie-Hellman key exchange, through the by Antoine Pitrou · 13 years ago
- 501da61 Fix ssl module compilation if ECDH support was disabled in the OpenSSL build. by Antoine Pitrou · 13 years ago
- 8abdb8a Issue #13634: Add support for querying and disabling SSL compression. by Antoine Pitrou · 13 years ago
- 923df6f Issue #13627: Add support for SSL Elliptic Curve-based Diffie-Hellman by Antoine Pitrou · 13 years ago