Christian Heimes added the comment: This is not a bug. It's actually the way how wildcards in X.509 certificates work. For hostnames a wildcard only matches one label. There can only be one wildcard and the wildcard must be in the left-most label. https://tools.ietf.org/html/rfc6125#section-6.4.3
This means that "*.s3.amazonaws.com" matches "com.s3.amazonaws.com" but doesn't match "planet.sofiavalley.com.s3.amazonaws.com". ---------- nosy: +christian.heimes resolution: -> not a bug stage: -> resolved status: open -> closed type: -> behavior _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue25722> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com