[issue22365] SSLContext.load_verify_locations(cadata) does not accept CRLs

[Ralph Broenink]

Ralph Broenink added the comment:

Here's a minimal example of the issue, assuming you have obtained a CRL in PEM format, e.g. from https://www.emulab.net/genicrl.bundle:


    import ssl
    context = ssl.create_default_context()

    path = 'path/to/crl.crl'

    # Working:
    context.load_verify_locations(cafile=path)

    # Not working:
    with open(path, 'r') as f:
        context.load_verify_locations(cadata=f.read())


Replacing the path to the CRL with a path to a CA works in both cases.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue22365>
_______________________________________