Skip Montanaro <skip.montan...@gmail.com> added the comment:

Just in case this would be useful to others, git bisect led me to this commit 
as the source of the problem:

61d478c71c5341cdc54e6bfb4ace4252852fd972 is the first bad commit
commit 61d478c71c5341cdc54e6bfb4ace4252852fd972
Author: Christian Heimes <christ...@python.org>
Date:   Sat Jan 27 15:51:38 2018 +0100

    bpo-31399: Let OpenSSL verify hostname and IP address (#3462)
    
    bpo-31399: Let OpenSSL verify hostname and IP
    
    The ssl module now uses OpenSSL's X509_VERIFY_PARAM_set1_host() and
    X509_VERIFY_PARAM_set1_ip() API to verify hostname and IP addresses.
    
    * Remove match_hostname calls
    * Check for libssl with set1_host, libssl must provide 
X509_VERIFY_PARAM_set1_host()
    * Add documentation for OpenSSL 1.0.2 requirement
    * Don't support OpenSSL special mode with a leading dot, e.g. 
".example.org" matches "www.example.org". It's not standard conform.
    * Add hostname_checks_common_name
    
    Signed-off-by: Christian Heimes <christ...@python.org>

:040000 040000 09f4c8a18941f926c1f79e2f07dfd7731edf74c2 
798ae3fab880e3365c490d56935901a4c18fd3bd M      Doc
:040000 040000 f35a1b4e2144050dfc4c7dbb02b7d92e3de1c2d0 
7af4e4a8e82eafc6e7f2f4392c951213777f12c4 M      Lib
:040000 040000 e287c27f4db61beae905c21b96666194bb930c13 
59e6fc63d296f7fe3187ff0987a04c9999e2d1d0 M      Misc
:040000 040000 95250f4c1009b5f10ec392c186908698d78f9cd3 
160ebeb2c63d1ca305c7e37a0b555900b5084d20 M      Modules
:040000 040000 8adc7f664a8eaa667f4540f537304d7f9de672d4 
41ea621f5433077f6dd776f4c2c51f7a8e4cab0f M      PC
:100644 100644 a6f4488cc99941abaa8b6fb7c53079b7cc292f9f 
ba0a7624cfcd0129e73bc218510f398001514df8 M      setup.py

----------
nosy: +skip.montanaro

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue33099>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to