[issue13647] Python SSL stack doesn't securely validate certificate (as client)

[naif]

naif <naif at globaleaks.org> added the comment:

mmmm looking at OpenSSL command line, there is the "verify" that does a lot of checks on it's own:
http://www.openssl.org/docs/apps/verify.html

Dan, do you think that this apps does all the "best practice" verificati or it's missing something?

Antoine, in case it's useful, do you think that it would be possible to have something exactly-like the OpenSSL verify command?

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue13647>
_______________________________________