If your Python is < 2.7.9, underlying standard library (HTTPSConnection) does not support this AFAIK. Otherwise, it should do the validation, as Thrift is just using HTTPSConnection with default args: > This class now performs all the necessary certificate and hostname checks by default. https://docs.python.org/2/library/httplib.html#httplib.HTTPSConnection
On Tue, Mar 15, 2016 at 2:44 AM j.barrett Strausser < [email protected]> wrote: > Is it possible to force cert validation for the python HTTP client? It > appears not to do hostname validation or cert chain validation? Is this a > function of an underlying library? > > -Barrett >
