[issue18616] enable more ssl socket options with get_server_certificate

[Christian Heimes]

Christian Heimes added the comment:

I would accept a patch that adds a ssl_context argument to 
get_server_certificate().

--
status: open -> pending
versions: +Python 3.6, Python 3.7 -Python 3.4, Python 3.5

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue18616] enable more ssl socket options with get_server_certificate

[Antoine Pitrou]

Antoine Pitrou added the comment:

To be frank, it's quite easy to open the connection and read the cert yourself, 
so I don't think complicating this API is very useful.
Still, I'm leaving this open so that other developers can chime in.

--
nosy: +christian.heimes, dstufft, giampaolo.rodola, janssen, pitrou

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue18616
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue18616] enable more ssl socket options with get_server_certificate

[Derek Wilson]

Derek Wilson added the comment:

any thoughts on this? there's a lot of room for improvement in python ssl...

--
versions: +Python 3.5

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue18616
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue18616] enable more ssl socket options with get_server_certificate

[Derek Wilson]

New submission from Derek Wilson:

ssl.get_server_certificate does not allow advanced options like what ciphers to 
use (for ssl2 for instance) or SNI for virtual hosts with multiple ssl sites on 
one IP address.

Adding **kwargs enables any current and future SSLSocket options to be passed 
along to the underlying connection. wrap_socket doesn't include all the options 
(npn and sni for instance), so I use SSLSocket instead.

--
components: Extension Modules
files: ssl_get_server_certificate_kwargs.patch
keywords: patch
messages: 194083
nosy: underrun
priority: normal
severity: normal
status: open
title: enable more ssl socket options with get_server_certificate
type: enhancement
versions: Python 3.4
Added file: 
http://bugs.python.org/file3/ssl_get_server_certificate_kwargs.patch

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue18616
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com