https client certificate validation

Heikki Toivonen heikki at osafoundation.org
Wed Oct 25 14:48:44 EDT 2006


Yogesh Chawla - PD wrote:
> After writing a basic script using HTTPSConnection, I
> found this in the docs:
> 
> Warning: This does not do any certificate
> verification!

Right, for production you use almost certainly need to use some 3rd
party SSL library, of which there are several.

> I then tried to do the same using twisted, m2crypto
> and a few other projects.

M2Crypto does support client certificate validation, so I am a bit at a
loss what problem you are facing. There is even a unit test that does
mutual authentication:
http://lxr.osafoundation.org/m2crypto/source/tests/test_ssl.py#478

-- 
  Heikki Toivonen



More information about the Python-list mailing list