SSL module needs issuer information

John Nagle nagle at animats.com
Sat Sep 3 20:10:06 CEST 2011


   The SSL module still doesn't return much information from the
certificate.  SSLSocket.getpeercert only returns a few basic items
about the certificate subject.  You can't retrieve issuer information,
and you can't get the extensions needed to check if a cert is an EV cert.

   With the latest flaps about phony cert issuers, it's worth
having issuer info available.  It was available in the old M2Crypto
module, but not in the current Python SSL module.

				John Nagle



More information about the Python-list mailing list