[issue34440] Certificate verify failed (works fine in 3.6)

[Christian Heimes]

Christian Heimes <lists at cheimes.de> added the comment:

Python 3.6 is a little more forgiving than Python 3.7. Python 3.7 uses OpenSSL's hostname verification algorithms, which interpret the RFCs more strictly. You have to include a SAN field of type IP address. Matching against CN has been deprecated for more than 15 years, see https://bugs.chromium.org/p/chromium/issues/detail?id=308330

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue34440>
_______________________________________