[issue30525] Expose SCTs on TLS connections

Christian Heimes added the comment: I looked into the matter. It's certainly doable to have simple CT validation. A custom CT policy is a bit more work, as I would have to provide a callback and two new types. * a method to load CT log config, SSL_CTX_set_ctlog_list_file() * a method to enab

[issue30525] Expose SCTs on TLS connections

Change by Christian Heimes : -- versions: +Python 3.8 -Python 3.7 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscrib

[issue30525] Expose SCTs on TLS connections

Christian Heimes added the comment: +1 -- stage: -> needs patch type: -> enhancement ___ Python tracker ___ ___ Python-bugs-list mai

[issue30525] Expose SCTs on TLS connections

New submission from Alex Gaynor: CT (https://www.certificate-transparency.org/) is starting to become a thing! It'd be great if we exposed SCTs (whether from TLS extensions, OCSP, or embedded in the certificate) for TLS connections. This would allow higher level protocols to begin acting on th