[brettcs]

This branch implements the suggested fix along with a test that fails on current main. CC @sethmlarson @StanFromIreland

• Issue: ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity #161503

[StanFromIreland]

Please update:

    If 'ca_certs' is specified, validate the server cert against it and
    check that it matches the hostname.

Same for docs.

JFYI, we generally prefer to open these in the private fork first to straighten out such things, but this is small so we should be fine.

[brettcs]

Please update:

Both done.

JFYI, we generally prefer to open these in the private fork first to straighten out such things, but this is small so we should be fine.

Heard, Seth suggested working on this one in public just because it's low-impact (and I needed an issue number for the blurb anyway).

[read-the-docs-community]

Documentation build overview

📚 cpython-previews | 🛠️ Build #35707548 | 📁 Comparing e05d003 against main (2781ffe)

  🔍 Preview build  

2 files changed

± library/ssl.html
± whatsnew/changelog.html