From 4ffb0752710f0c0720d4f2af0c4b7ce1ebb9d2bd Mon Sep 17 00:00:00 2001 From: Benjamin Peterson Date: Mon, 3 Nov 2014 14:29:33 -0500 Subject: PEP 476: enable HTTPS certificate verification by default (#22417) Patch by Alex Gaynor with some modifications by me. --- Lib/ssl.py | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) (limited to 'Lib/ssl.py') diff --git a/Lib/ssl.py b/Lib/ssl.py index e2636eff4c9..b6e6f1695d0 100644 --- a/Lib/ssl.py +++ b/Lib/ssl.py @@ -441,8 +441,7 @@ def create_default_context(purpose=Purpose.SERVER_AUTH, *, cafile=None, context.load_default_certs(purpose) return context - -def _create_stdlib_context(protocol=PROTOCOL_SSLv23, *, cert_reqs=None, +def _create_unverified_context(protocol=PROTOCOL_SSLv23, *, cert_reqs=None, check_hostname=False, purpose=Purpose.SERVER_AUTH, certfile=None, keyfile=None, cafile=None, capath=None, cadata=None): @@ -480,6 +479,14 @@ def _create_stdlib_context(protocol=PROTOCOL_SSLv23, *, cert_reqs=None, return context +# Used by http.client if no context is explicitly passed. +_create_default_https_context = create_default_context + + +# Backwards compatibility alias, even though it's not a public name. +_create_stdlib_context = _create_unverified_context + + class SSLSocket(socket): """This class implements a subtype of socket.socket that wraps the underlying OS socket in an SSL context when necessary, and -- cgit v1.2.3