mirror of
https://github.com/python/cpython
synced 2026-09-26 16:21:04 +03:00
This adds `VERIFY_X509_STRICT` to make the default SSL context perform stricter (per RFC 5280) validation, as well as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant path-building behavior. As part of this changeset, I had to tweak `make_ssl_certs.py` slightly to emit 5280-conforming CA certs. This changeset includes the regenerated certificates after that change. Signed-off-by: William Woodruff <william@yossarian.net> Co-authored-by: Victor Stinner <vstinner@python.org> |
||
|---|---|---|
| .. | ||
| Build | ||
| C API | ||
| Core and Builtins | ||
| Documentation | ||
| IDLE | ||
| Library | ||
| macOS | ||
| Security | ||
| Tests | ||
| Tools-Demos | ||
| Windows | ||