[issue10441] some stdlib modules need to be updated to handle SSL certificate validation

[Christian Heimes]

Christian Heimes added the comment:

I agree with Antoine. I'm not sure what is going to happen if you use a single SSLContext for unrelated services and different hosts -- not to mention SNI.

A while ago I tried a similar patch but I was stopped by the fact that OpenSSL doesn't provide an API to clone / copy a SSLContext object. Perhaps we have to introduce a factory that creates SSLContext object from a global configuration?

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue10441>
_______________________________________