[issue20050] distutils should check PyPI certs when connecting to it
Antoine Pitrou
report at bugs.python.org
Sun Dec 22 01:52:05 CET 2013
New submission from Antoine Pitrou:
Spun off from #12226: distutils now uses HTTPS by default to connect PyPI, but certs aren't checked at all.
----------
components: Library (Lib)
messages: 206800
nosy: Giovanni.Bajo, alexis, benjamin.peterson, christian.heimes, dstufft, eric.araujo, georg.brandl, pitrou
priority: high
severity: normal
status: open
title: distutils should check PyPI certs when connecting to it
type: security
versions: Python 2.7, Python 3.2, Python 3.3, Python 3.4
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue20050>
_______________________________________
More information about the Python-bugs-list
mailing list