Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

It is easier to change the specification to fit the program than vice versa.


devel / comp.lang.python / Re: ssl server: how to disable client cert verfication?

SubjectAuthor
o Re: ssl server: how to disable client cert verfication?Dieter Maurer

1
Re: ssl server: how to disable client cert verfication?

<mailman.11.1644002885.7010.python-list@python.org>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=21319&group=comp.lang.python#21319

  copy link   Newsgroups: comp.lang.python
Path: i2pn2.org!i2pn.org!news.swapon.de!fu-berlin.de!uni-berlin.de!not-for-mail
From: dieter@handshake.de (Dieter Maurer)
Newsgroups: comp.lang.python
Subject: Re: ssl server: how to disable client cert verfication?
Date: Fri, 4 Feb 2022 20:28:03 +0100
Lines: 12
Message-ID: <mailman.11.1644002885.7010.python-list@python.org>
References: <61fc49d4.1c69fb81.a405c.5b87@mx.google.com>
<15D2E951-9767-4A40-8EAC-DDA63D611ACF@barrys-emacs.org>
<61fc58e9.1c69fb81.f1e67.01bd@mx.google.com>
<25085.32323.499265.960572@ixdm.fritz.box>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Trace: news.uni-berlin.de KyMSJw5k9FJuzc4A70SnlQq1J1stC8OiAH9vjIq5behw==
Return-Path: <dieter@handshake.de>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
Authentication-Results: mail.python.org; dkim=none reason="no signature";
dkim-adsp=none (unprotected policy); dkim-atps=neutral
X-Spam-Status: OK 0.007
X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'library.': 0.05;
'underlying': 0.07; 'cc:addr:python-list': 0.09; 'subject:how':
0.09; 'cc:no real name:2**0': 0.14; 'barry': 0.16; 'flag': 0.16;
'spot': 0.16; 'ssl': 0.16; 'subject:client': 0.16;
'subject:disable': 0.16; 'times,': 0.16; 'wrote:': 0.16; 'python':
0.16; 'grant': 0.17; 'cc:addr:python.org': 0.20; 'option': 0.20;
'received:de': 0.23; 'actual': 0.25; 'cc:2**0': 0.25;
'certificate': 0.26; 'library': 0.26; 'looked': 0.31; 'but': 0.32;
'able': 0.34; 'header:In-Reply-To:1': 0.34; 'quite': 0.39; 'use':
0.39; 'wrote': 0.39; 'case.': 0.40; 'validation': 0.64; 'your':
0.64; 'process.': 0.65; 'header:Received:6': 0.67; 'client': 0.82;
'received:88': 0.84; 'thus,': 0.84
In-Reply-To: <61fc58e9.1c69fb81.f1e67.01bd@mx.google.com>
X-Mailer: VM 8.0.12-devo-585 under 21.4 (patch 24) "Standard C" XEmacs Lucid
(x86_64-linux-gnu)
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: General discussion list for the Python programming language
<python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>,
<mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <https://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>,
<mailto:python-list-request@python.org?subject=subscribe>
X-Mailman-Original-Message-ID: <25085.32323.499265.960572@ixdm.fritz.box>
X-Mailman-Original-References: <61fc49d4.1c69fb81.a405c.5b87@mx.google.com>
<15D2E951-9767-4A40-8EAC-DDA63D611ACF@barrys-emacs.org>
<61fc58e9.1c69fb81.f1e67.01bd@mx.google.com>
 by: Dieter Maurer - Fri, 4 Feb 2022 19:28 UTC

Grant Edwards wrote at 2022-2-3 14:36 -0800:
>On 2022-02-03, Barry <barry@barrys-emacs.org> wrote:
> ...
>I've looked through the ssl.Context documentation multiple times, and
>haven't been able to spot any option or flag that disables client
>certificate validation or allows the user to override the actual
>client certificate validation process.

Note that Python does not do the certificate validation itself
but delegates this to the underlying SSL library.
Thus, this library would need to support your use case.
It may not as your scenario is quite special.


devel / comp.lang.python / Re: ssl server: how to disable client cert verfication?

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor