[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Gregory P. Smith added the comment: I believe this has been addressed. -- stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Larry Hastings added the comment: New changeset 221178aea686abf13ff92b7e2b5ed3e739a53b3f by larryhastings (Gregory P. Smith) in branch '3.5': [3.5] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) (#13200)

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Chih-Hsuan Yen added the comment: Hi Michael Felt, > And, what it looks like you are trying to do with an updated 'signing" .pem > is to remove the 'self-signed' charasteric. If I understand it correctly, the new certificate is indeed still self-signed. It's updated to match the

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Michael Felt added the comment: On 21/05/2019 12:08, Michael Felt wrote: > Michael Felt added the comment: > > p.s. On Centos I could not even get a python3 (at least not easily). > > On debian (on POWER) I get the same error (message) as on AIX - although the > line number did change. > >

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Michael Felt added the comment: p.s. On Centos I could not even get a python3 (at least not easily). On debian (on POWER) I get the same error (message) as on AIX - although the line number did change. ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Michael Felt added the comment: I am not an OpenSSL expert - and I am conscious of OpenSSL changes with regard to 'acceptance' of anything self-signed. And, what it looks like you are trying to do with an updated 'signing" .pem is to remove the 'self-signed' charasteric. On AIX - atm - I

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Gregory P. Smith added the comment: New changeset 7b5dca8345f4a909367836a3a2c3c7ac6e4e2c0c by Gregory P. Smith in branch '2.7': [2.7] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) (GH-13199) https://github.com/python/cpython/commit/7b5dca8345f4a909367836a3a2c3c7ac6e4e2c0c

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

miss-islington added the comment: New changeset 6daaf3f7de78eec2c80eaa8e94e4cca54f758a30 by Miss Islington (bot) (Gregory P. Smith) in branch '3.7': [3.7] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) (GH-13197)

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Ned Deily added the comment: New changeset 2b9d7abdbd4b41e2c624858f5bc80da59d8a681d by Ned Deily (Gregory P. Smith) in branch '3.6': [3.6] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) (GH-13198)

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Change by Gregory P. Smith : -- pull_requests: +13111 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Change by Gregory P. Smith : -- pull_requests: +13110 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Change by Gregory P. Smith : -- pull_requests: +13109 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Change by Gregory P. Smith : -- pull_requests: +13108 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

miss-islington added the comment: New changeset 6bd81734de0b73f1431880d6a75fb71bcbc65fa1 by Miss Islington (bot) (Gregory P. Smith) in branch 'master': bpo-36816: Update the self-signed.pythontest.net cert (GH-13192)

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Change by Gregory P. Smith : -- pull_requests: +13104 stage: commit review -> patch review ___ Python tracker ___ ___

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Chih-Hsuan Yen added the comment: Lib/test/selfsigned_pythontestdotnet.pem in the cpython repository needs to be updated to match https://github.com/python/pythontestdotnet/blob/master/tls/self-signed-cert.pem, or the test fails :)

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Ernest W. Durbin III added the comment: Cert updated, reassigning back to gregory.p.smith to verify and close this out. -- assignee: EWDurbin -> gregory.p.smith ___ Python tracker

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Change by Chih-Hsuan Yen : -- nosy: +yan12125 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Gregory P. Smith added the comment: Updated cert+key committed to pythontestdotnet. reassigning to EWDurbin to see that they're deployed. https://github.com/python/pythontestdotnet/commit/2d121419796dad6d4285bf5aefd464aff0f47a91 -- assignee: gregory.p.smith -> EWDurbin resolution:

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Gregory P. Smith added the comment: EWDurbin says I can just open a PR with new certs in the repo and it'll go from there. :) -- assignee: EWDurbin -> gregory.p.smith ___ Python tracker

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Change by Gregory P. Smith : -- keywords: +patch pull_requests: +13037 stage: needs patch -> patch review ___ Python tracker ___

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

New submission from Gregory P. Smith : test_httplib uses self-signed.pythontest.net in it's test_networked_good_cert test. On modern Linux distros (current Debian testing sid), the certificate it currently uses is rightfully rejected as being too weak: ERROR: test_networked_good_cert