This bug was fixed in the package python-urllib3 - 1.13.1-2ubuntu0.16.04.2~cloud0 ---------------
python-urllib3 (1.13.1-2ubuntu0.16.04.2~cloud0) trusty-mitaka; urgency=medium . * New update for the Ubuntu Cloud Archive. . python-urllib3 (1.13.1-2ubuntu0.16.04.2) xenial; urgency=medium . * d/p/07_support_ip_sans.patch: Cherry pick fix to support use of IP based SAN's in TLS certificates (LP: #1771988). ** Changed in: cloud-archive/mitaka Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1771988 Title: certificate validation with IP address based SAN's fails Status in Ubuntu Cloud Archive: Fix Released Status in Ubuntu Cloud Archive mitaka series: Fix Released Status in python-urllib3 package in Ubuntu: Fix Released Status in python-urllib3 source package in Xenial: Fix Released Bug description: [Impact] Users of urllib3 are unable to securely access websites who's certificates use IP based subject alternative names; this includes openstack client tooling which uses urllib3 via requests. [Test Case] Deploy and configure a server with TLS and an IP based SAN cert with a locally trusted CA. import urllib3 http = urllib3.PoolManager() r = http.request('GET', 'https://192.168.1.2') will fail [Regression Potential] Cherry picked fix comes from a later urllib3 release which has tested fine for IP SAN usage in later OpenStack release deployments. [Original Bug Report] urllib3 fails to validate certificates with IP address based SAN's. Fixed upstream: https://github.com/urllib3/urllib3/commit/c74bd70c3a97e30f0560bee9b7fa1bfc767ebf0b To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1771988/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp