[issue7776] http.client.HTTPConnection tunneling is broken

[Nikolaus Rath]

Nikolaus Rath added the comment:

On 05/09/2014 02:02 PM, Cybjit wrote:
> C:\Python34\Scripts>pip -v install simplejson
> Downloading/unpacking simplejson
>   Could not fetch URL https://pypi.python.org/simple/simplejson/: connection err
> or: hostname 'openwrt.lan' doesn't match either of '*.c.ssl.fastly.net', 'c.ssl.

This looks as if pip tries to match the hostname in the certificate from
pypi.python.org against the hostname of the local proxy. Looking at the
code, I don't see why it would do that though. HTTPSConnection.connect
definitely tries to match against the final hostname.

Is pip maybe doing its own certificate check, and relying on
HTTPSConnection.host to contain the final hostname rather than the proxy?

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue7776>
_______________________________________