[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Christian Heimes added the comment: This feature request has been idle for five years. Although TLS-SRP is nice to have, it is not a priority for protocols such as HTTPS. I neither have time nor motivation to create a patch myself. Therefore I'm closing this issue of lack of activity. Please

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Christian Heimes : -- assignee: -> christian.heimes components: +SSL ___ Python tracker ___

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Christian Heimes : -- components: +Extension Modules versions: +Python 3.7 -Python 3.4 ___ Python tracker ___

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Nicolas Jouanin n...@beerfactory.org: -- nosy: +njouanin ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___ ___ Python-bugs-list

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Christian Heimes li...@cheimes.de: -- nosy: +christian.heimes ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___ ___

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Senthil Kumaran added the comment: 2012/9/10 Jesús Cea Avión rep...@bugs.python.org: Ping!. Guess, it is still for 3.4. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Jesús Cea Avión added the comment: Yes, 3.4. I would hate to rush, in two years, because this issue was neglected during 18 months :) No reason for not starting now. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Antoine Pitrou added the comment: Le mardi 11 septembre 2012 à 13:52 +, Jesús Cea Avión a écrit : No reason for not starting now. There's no point in being pushy, though. If you want to start, the best thing is to work on the patch and update it. --

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Jesús Cea Avión added the comment: Ping!. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___ ___ Python-bugs-list mailing list

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Antoine Pitrou pit...@free.fr: -- versions: +Python 3.4 -Python 3.3 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___ ___

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Antoine Pitrou pit...@free.fr added the comment: Quinn, are you planning to work on an updated patch? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Quinn Slack s...@cs.stanford.edu added the comment: I have updated the patch in hg to address the sections marked TODO (after I submitted a patch to OpenSSL that they depended on). I'll resubmit a patch here in a ~week addressing that issue and those below, to continue pushing this issue

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Antoine Pitrou pit...@free.fr added the comment: Thanks for the patch. Some preliminary comments: - the OpenSSL functions you are using (SSL_get_srp_username etc.) don't seem documented on openssl.org; this makes it harder to do a proper review - no need to fill Misc/ACKS and Misc/NEWS by

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Jesús Cea Avión j...@jcea.es: -- nosy: +jcea ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___ ___ Python-bugs-list mailing list

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Senthil Kumaran sent...@uthcode.com: -- nosy: +orsenthil ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___ ___ Python-bugs-list

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Jesús Cea Avión j...@jcea.es added the comment: The idea seems interesting. I will check the RFC ASAP. The patch should include documentation updates, though. You can update the issue number in the NEWS file, also. Do you plan to complete the sections marked as TODO? PS: The mercurial

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Jesús Cea Avión j...@jcea.es added the comment: Also, I will not invest too much time on this until OpenSSL 1.0.1 is released, with support for this. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Quinn Slack s...@cs.stanford.edu added the comment: Thanks for checking this out. Yes, this should wait for OpenSSL 1.0.1. I will fix the TODO. It is there because the current TLS-SRP patch to OpenSSL uses old (pre-RFC 5054) TLS alert values for when the SRP username isn't in the Client

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

New submission from Quinn Slack s...@cs.stanford.edu: This patch adds support for TLS-SRP (RFC 5054[1]) to Python ssl.SSLSocket, _ssl.c, http, and urllib. TLS-SRP lets a client and server establish a mutually authenticated SSL channel using only a username and password (a certificate may also

[issue11943] Add TLS-SRP (RFC 5054) support to ssl, _ssl, http, and urllib

Changes by Antoine Pitrou pit...@free.fr: -- nosy: +debatem1, pitrou stage: - patch review type: - feature request ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11943 ___