[Python-Dev] More on server-side SSL support

Bill Janssen janssen at parc.com
Tue Aug 21 17:30:23 CEST 2007


> This is a self-signed cert, and it's still an open question whether
> they should verify, and under what circumstances.  I'm currently
> thinking that in the CERT_OPTIONAL regime, they could, but with
> CERT_REQUIRED, they shouldn't.

If an application wanted self-signed certs to verify under
CERT_REQUIRED, they could add them to their rootcerts file.

Bill


More information about the Python-Dev mailing list