[issue32819] match_hostname() error reporting bug

Change by Christian Heimes : -- resolution: -> fixed stage: needs patch -> resolved status: open -> closed ___ Python tracker ___

[issue32819] match_hostname() error reporting bug

Christian Heimes added the comment: Don't worry, it happens automatically when somebody replies to a pending ticket w/o closing it explicitly. I need to backport the patch manually. -- resolution: fixed -> stage: resolved -> needs patch status: pending -> open

[issue32819] match_hostname() error reporting bug

Christian Heimes added the comment: I also fixed an issue for Brandon's backport, https://bitbucket.org/brandon/backports.ssl_match_hostname/issues/12/update-to-implementation-from-37 -- ___ Python tracker

[issue32819] match_hostname() error reporting bug

Alex Gaynor added the comment: (Didn't mean to update status) -- status: open -> pending ___ Python tracker ___

[issue32819] match_hostname() error reporting bug

Alex Gaynor added the comment: Can confirm, no browsers do partial (or multiple) wildcards and the CABF rules don't allow public CAs to issue them. -- status: pending -> open ___ Python tracker

[issue32819] match_hostname() error reporting bug

Christian Heimes added the comment: master and 3.7 are fixed. Should I backport the issue to 2.7 and 3.6, too? It changes behavior slightly because it drops support for partial wildcards. RFC 6125 consider it an optional feature. AFAIK browsers don't match them either.

[issue32819] match_hostname() error reporting bug

Christian Heimes added the comment: New changeset 46632f4d3c1f3aef875d2ada750a298ab0510992 by Christian Heimes (Miss Islington (bot)) in branch '3.7': [3.7] bpo-32819: Simplify and improve ssl.match_hostname (GH-5620) (#5847)

[issue32819] match_hostname() error reporting bug

Change by miss-islington : -- pull_requests: +5623 ___ Python tracker ___

[issue32819] match_hostname() error reporting bug

Christian Heimes added the comment: New changeset aef1283ba428e33397d87cee3c54a5110861552d by Christian Heimes in branch 'master': bpo-32819: Simplify and improve ssl.match_hostname (#5620) https://github.com/python/cpython/commit/aef1283ba428e33397d87cee3c54a5110861552d

[issue32819] match_hostname() error reporting bug

Change by Christian Heimes : -- keywords: +patch pull_requests: +5429 stage: -> patch review ___ Python tracker ___

[issue32819] match_hostname() error reporting bug

New submission from Christian Heimes : Since bpo #23033, ssl.match_hostname() no longer supports partial wildcard matching, e.g. "www*.example.org". In case of a partial match, _dnsname_match() fails with a confusing/wrong error message: >>> import ssl >>>