validating HTTPS certificates?

Heikki Toivonen hjtoi-better-remove-before-reply at comcast.net
Mon Jun 29 14:22:37 EDT 2009


Andras.Horvath at cern.ch wrote:
> I'm in the process of picking a language for a client application that
> accesses a HTTPS (actually SOAP) server.  This would be easy enough in
> Python, but I came across a strange fact: neither httplib nor urllib
> offer the possibility to actually verify the server's certificate.

Right, stdlib does not do this for you automatically. You'd either need
to write that code yourself, or use a third party library. I wrote a
long post about this when 2.6 came out:

http://www.heikkitoivonen.net/blog/2008/10/14/ssl-in-python-26/

-- 
  Heikki Toivonen



More information about the Python-list mailing list