New submission from David D Lowe:

The documentation for ssl.SSLSocket.getpeercert states:

> If the binary_form parameter is True, and a certificate was provided, this 
> method returns the DER-encoded form of the entire certificate as a sequence 
> of bytes, or None if the peer did not provide a certificate. This return 
> value is independent of validation; if validation was required (CERT_OPTIONAL 
> or CERT_REQUIRED), it will have been validated, but if CERT_NONE was used to 
> establish the connection, the certificate, if present, will not have been 
> validated.

However, in the case that validation is not required, getpeercert does not 
return a certificate, even when binary_form is set to True.

----------
components: Library (Lib)
files: test.tar.gz
messages: 186999
nosy: Flimm
priority: normal
severity: normal
status: open
title: ssl.SSLSocket.getpeercert does not return client certificate
type: behavior
versions: Python 2.7, Python 3.2
Added file: http://bugs.python.org/file29867/test.tar.gz

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue17739>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to