[issue22417] PEP 476: verify HTTPS certificates by default

2017-01-04 Thread Christian Heimes
Christian Heimes added the comment: Carlos, you are correct. Please create a new issue and make it a documentation issue for 2.7. Thanks! -- ___ Python tracker

[issue22417] PEP 476: verify HTTPS certificates by default

2017-01-03 Thread Carlos Alberto Lopez Perez
Carlos Alberto Lopez Perez added the comment: The python 2.7 documentation for urrlib still has a big warning notice at the top saying: """ Warning When opening HTTPS URLs, it does not attempt to validate the server certificate. Use at your own risk! """ ^^

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-23 Thread Alex Gaynor
Alex Gaynor added the comment: Attached patch backports this to 2.7. -- Added file: http://bugs.python.org/file37261/issue22417.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-23 Thread Roundup Robot
Roundup Robot added the comment: New changeset fb83916c3ea1 by Benjamin Peterson in branch '2.7': pep 476: verify certificates by default (#22417) https://hg.python.org/cpython/rev/fb83916c3ea1 -- ___ Python tracker rep...@bugs.python.org

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-23 Thread Benjamin Peterson
Changes by Benjamin Peterson benja...@python.org: -- resolution: - fixed status: open - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-13 Thread koobs
koobs added the comment: Builds failing on koobs-freebsd9 buildbot for: 3.x: since revision b2c17681404f80edae2ee4846db701104d942cc4 3.4: since revision 246c9570a75798a4757001620cf92cc8d2eba684 Attaching both initial build failure test logs. -- nosy: +koobs Added file:

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-03 Thread Benjamin Peterson
Benjamin Peterson added the comment: % ./python Lib/test/regrtest.py -v test_urllib2_localnet == CPython 3.4.2+ (3.4:7be6ef737aaf+, Nov 3 2014, 10:03:11) [GCC 4.8.3] == Linux-3.16.5-gentoo-x86_64-Intel-R-_Core-TM-_i7-2860QM_CPU_@_2.50GHz-with-gentoo-2.2 little-endian == hash algorithm:

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-03 Thread Alex Gaynor
Alex Gaynor added the comment: Latest patch fixes the urllib2_localnet tests. -- Added file: http://bugs.python.org/file37122/issue22417.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-03 Thread Alex Gaynor
Alex Gaynor added the comment: Fix for the failing test_ssl testes. -- Added file: http://bugs.python.org/file37123/issue22417.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-03 Thread Roundup Robot
Roundup Robot added the comment: New changeset 2afe5413d7af by Benjamin Peterson in branch '3.4': PEP 476: enable HTTPS certificate verification by default (#22417) https://hg.python.org/cpython/rev/2afe5413d7af New changeset 731375f83406 by Benjamin Peterson in branch 'default': merge 3.4

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-03 Thread Benjamin Peterson
Benjamin Peterson added the comment: Okay, 3.4/3.5 have been dealt with. I had to hack up test_logging a bit. (#22788 would make that better). 2.7 now needs a backport. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-03 Thread Benjamin Peterson
Benjamin Peterson added the comment: Somehow the Windows bots are failing to verify python.org http://buildbot.python.org/all/builders/x86%20XP-4%203.x/builds/11179/steps/test/logs/stdio -- ___ Python tracker rep...@bugs.python.org

[issue22417] PEP 476: verify HTTPS certificates by default

2014-11-02 Thread Alex Gaynor
Alex Gaynor added the comment: New patch uses self-signed.pythontest.net, instead of svn.python.org. svn.python.org is signed by CACert, which is in the root on some machines. -- Added file: http://bugs.python.org/file37113/issue22417.diff ___

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-31 Thread Alex Gaynor
Alex Gaynor added the comment: New version of the patch based on feedback from benjamin, should make it easier to do the 3.4 branch stuff. -- Added file: http://bugs.python.org/file37094/issue22417.diff ___ Python tracker rep...@bugs.python.org

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-30 Thread Alex Gaynor
Alex Gaynor added the comment: Patch now makes more precise assertions about the type of error that's occurring. -- Added file: http://bugs.python.org/file37077/issue22417.diff ___ Python tracker rep...@bugs.python.org

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-30 Thread Alex Gaynor
Alex Gaynor added the comment: Updates to teh docs based on teh feedback from Antoine. -- Added file: http://bugs.python.org/file37081/issue22417.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-13 Thread Raúl Cumplido
Changes by Raúl Cumplido raulcumpl...@gmail.com: -- nosy: +raulcd ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___ ___ Python-bugs-list

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-13 Thread Alex Gaynor
Alex Gaynor added the comment: Patch with the implementation, and initial work on documentation. Needs review please, I suspect we need more docs in more places. Feedback please! -- keywords: +needs review Added file: http://bugs.python.org/file36901/issue22417.diff

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-25 Thread Jesús Cea Avión
Changes by Jesús Cea Avión j...@jcea.es: -- nosy: +jcea ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___ ___ Python-bugs-list mailing list

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-21 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com: -- nosy: +Arfrever ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-20 Thread Christian Heimes
Changes by Christian Heimes li...@cheimes.de: -- nosy: +christian.heimes ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___ ___

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-19 Thread Nick Coghlan
Nick Coghlan added the comment: Currently marking as a deferred blocker, as Alex wasn't sure he'd be able to get PEP 476 fully updated in time for 3.4.2rc1, and was willing to accept waiting for 2.7.9 and 3.4.3 rather than delaying 3.4.2 any further. However, that was before Senthil accepted

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-18 Thread Jakub Wilk
Changes by Jakub Wilk jw...@jwilk.net: -- nosy: +jwilk ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___ ___ Python-bugs-list mailing list

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-17 Thread Senthil Kumaran
Changes by Senthil Kumaran sent...@uthcode.com: -- nosy: +orsenthil ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___ ___ Python-bugs-list

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-15 Thread Nick Coghlan
New submission from Nick Coghlan: Attached minimal patch updates http.client.HTTPSConnection to validate certs by default and adjusts test.test_httplib accordingly. It doesn't currently include any docs changes, or changes to urllib. The process wide revert to the old behaviour hook is to

[issue22417] PEP 476: verify HTTPS certificates by default

2014-09-15 Thread Alex Gaynor
Changes by Alex Gaynor alex.gay...@gmail.com: -- nosy: +dstufft ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue22417 ___ ___ Python-bugs-list