[issue1589] New SSL module doesn't seem to verify hostname against commonName in certificate

[Antoine Pitrou]

Antoine Pitrou <pitrou at free.fr> added the comment:

Le vendredi 15 octobre 2010 à 22:51 +0000, Mads Kiilerich a écrit :
> Mads Kiilerich <mads at kiilerich.com> added the comment:
> 
> Can you confirm that the exception raised both on "too early" and "too
> late" is something like "...SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed"?

Yes.

> (If so: It would be nice if a slightly more helpful message could be
> given. I don't know if that is possible.)

Agreed. I don't know how to do that, though.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue1589>
_______________________________________