Repository navigation
ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity #161503
Description
Bug report
Doc/library/ssl.rst:411-413 says of ca_certs that "the call will attempt to validate the server certificate against that set of root certificates, and will fail if the validation attempt fails". It validates the chain and never checks that the certificate is for the host contacted.
CPython versions tested on:
CPython main branch
Operating systems tested on:
No response
Activity
pythonGH-161503: Check hostname in ssl.get_server_certificate with cu…
pythonGH-161503: Check hostname in ssl.get_server_certificate with cu…
pythonGH-161503: Update documentation for the new check
pythonGH-161503: Refine documentation per review