[Python-Dev] More on server-side SSL support
Bill Janssen
janssen at parc.com
Tue Aug 21 17:30:23 CEST 2007
> This is a self-signed cert, and it's still an open question whether
> they should verify, and under what circumstances. I'm currently
> thinking that in the CERT_OPTIONAL regime, they could, but with
> CERT_REQUIRED, they shouldn't.
If an application wanted self-signed certs to verify under
CERT_REQUIRED, they could add them to their rootcerts file.
Bill
More information about the Python-Dev
mailing list