[issue18617] AIA chasing for missing intermediate certificates on TLS connections

Ofek Lev added the comment: Any update on this? -- nosy: +Ofekmeister ___ Python tracker ___ ___ Python-bugs-list mailing list Unsu

[issue18617] AIA chasing for missing intermediate certificates on TLS connections

Change by Christian Heimes : -- assignee: docs@python -> christian.heimes stage: -> needs patch versions: +Python 3.8 -Python 3.7 ___ Python tracker ___ ___

[issue18617] AIA chasing for missing intermediate certificates on TLS connections

Alex Gaynor added the comment: Just discussed with Christian, and we're both in favor of adding AIA chasing support to the stdlib ssl. -- nosy: +alex, janssen ___ Python tracker ___

[issue18617] AIA chasing for missing intermediate certificates on TLS connections

April King added the comment: Err, sorry, I may have been a bit unclear. AIA chasing is not *universal* amongst browsers. IE, Edge, Chrome, and Safari perform AIA chasing. Firefox maintains a cache of intermediate certificate authorities. I noted that a bit further underneath, but my apolo

[issue18617] AIA chasing for missing intermediate certificates on TLS connections

April King added the comment: Browsers universally support AIA chasing/fetching, as do a number of underlying OS libraries, such as Secure Transport (macOS) and schannel (Windows). As a result, it is becoming increasingly common for server operators to fail to include the entire certificate ch