[issue20050] distutils should check PyPI certs when connecting to it

[Antoine Pitrou]

New submission from Antoine Pitrou:

Spun off from #12226: distutils now uses HTTPS by default to connect PyPI, but certs aren't checked at all.

----------
components: Library (Lib)
messages: 206800
nosy: Giovanni.Bajo, alexis, benjamin.peterson, christian.heimes, dstufft, eric.araujo, georg.brandl, pitrou
priority: high
severity: normal
status: open
title: distutils should check PyPI certs when connecting to it
type: security
versions: Python 2.7, Python 3.2, Python 3.3, Python 3.4

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue20050>
_______________________________________