[issue32185] SSLContext.wrap_socket sends SNI Extension when server_hostname is IP

Christian Heimes report at bugs.python.org
Thu Nov 30 13:10:09 EST 2017


Christian Heimes <lists at cheimes.de> added the comment:

Thanks!

3.4 and 3.5 are out of scope. They only receive security fixes.

For 3.7 https://github.com/python/cpython/compare/master...tiran:openssl_check_hostname will take care of the issue

2.7 and 3.6 are a bit tricky. There is no platform-compatible way to detect if a string is an IP address. inet_pton() is not available on Windows. I cannot use the OpenSSL parser because it is only available in 1.0.2+. 2.7 and 3.6 still support 0.9.8.

----------
nosy: +alex, dstufft, janssen
versions:  -Python 3.4, Python 3.5

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue32185>
_______________________________________


More information about the Python-bugs-list mailing list