[issue20050] distutils should check PyPI certs when connecting to it

2016-09-08 Thread Christian Heimes 

Christian Heimes added the comment:

distutils uses urlopen() which uses ssl.create_default_context() to create a 
SSLContext with cert validation and hostname verification enabled.

--
resolution:  -> fixed
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20050] distutils should check PyPI certs when connecting to it

2014-04-25 Thread William Tisäter 

Changes by William Tisäter will...@defunct.cc:


--
nosy: +tiwilliam

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue20050
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20050] distutils should check PyPI certs when connecting to it

2014-01-02 Thread Jakub Wilk 

Changes by Jakub Wilk jw...@jwilk.net:


--
nosy: +jwilk

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue20050
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20050] distutils should check PyPI certs when connecting to it

2013-12-27 Thread Chris Rebert 

Changes by Chris Rebert pyb...@rebertia.com:


--
nosy: +cvrebert

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue20050
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue20050] distutils should check PyPI certs when connecting to it

2013-12-21 Thread Antoine Pitrou 

New submission from Antoine Pitrou:

Spun off from #12226: distutils now uses HTTPS by default to connect PyPI, but 
certs aren't checked at all.

--
components: Library (Lib)
messages: 206800
nosy: Giovanni.Bajo, alexis, benjamin.peterson, christian.heimes, dstufft, 
eric.araujo, georg.brandl, pitrou
priority: high
severity: normal
status: open
title: distutils should check PyPI certs when connecting to it
type: security
versions: Python 2.7, Python 3.2, Python 3.3, Python 3.4

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue20050
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com