Christian Heimes added the comment:
distutils uses urlopen() which uses ssl.create_default_context() to create a
SSLContext with cert validation and hostname verification enabled.
--
resolution: -> fixed
status: open -> closed
___
Python tracker
Changes by William Tisäter will...@defunct.cc:
--
nosy: +tiwilliam
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue20050
___
___
Python-bugs-list
Changes by Jakub Wilk jw...@jwilk.net:
--
nosy: +jwilk
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue20050
___
___
Python-bugs-list mailing list
Changes by Chris Rebert pyb...@rebertia.com:
--
nosy: +cvrebert
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue20050
___
___
Python-bugs-list
New submission from Antoine Pitrou:
Spun off from #12226: distutils now uses HTTPS by default to connect PyPI, but
certs aren't checked at all.
--
components: Library (Lib)
messages: 206800
nosy: Giovanni.Bajo, alexis, benjamin.peterson, christian.heimes, dstufft,
eric.araujo,
