SSL module needs issuer information

Terry Reedy tjreedy at udel.edu
Sat Sep 3 15:23:13 EDT 2011


On 9/3/2011 2:10 PM, John Nagle wrote:
> The SSL module still doesn't return much information from the
> certificate. SSLSocket.getpeercert only returns a few basic items
> about the certificate subject. You can't retrieve issuer information,
> and you can't get the extensions needed to check if a cert is an EV cert.
>
> With the latest flaps about phony cert issuers, it's worth
> having issuer info available. It was available in the old M2Crypto
> module, but not in the current Python SSL module.

Check the tracker to see if there is an issue about this already. If 
not, open one with a specific feature request.

-- 
Terry Jan Reedy




More information about the Python-list mailing list