[issue18143] ssl.get_default_verify_paths()

[Christian Heimes]

Christian Heimes added the comment:

Sure! I can add SimpleNamespace.

The C function returns four elements:

 * environment var that is used to look up the path to a CA cert file
 * path to a CA cert file
 * environment var that is used to look up the path to a CA cert directory
 * path to a CA cert directory

SSLContext.set_default_verify_paths() is unable to return information if it was able to load any CA certs. With get_default_verify_paths() a developer is able to debug which file or directory is used by OpenSSL. The code is based on OpenSSL's X509_STORE_set_default_paths(). If you want to read up on it:

http://cvs.openssl.org/fileview?f=openssl/crypto/x509/x509_d2.c&v=1.7
http://cvs.openssl.org/fileview?f=openssl/crypto/x509/x509_def.c&v=1.5
http://cvs.openssl.org/fileview?f=openssl/crypto/x509/by_file.c&v=1.12.4.4

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue18143>
_______________________________________