Message 402789 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	pukkandan
Recipients	MDM-1, paul.moore, pukkandan, steve.dower, tim.golden, zach.ware
Date	2021-09-28.16:38:28
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<[email protected]>
In-reply-to

Content
Hi, I am the maintainer of the above mentioned project. I was planning to implement a patch for this. But I asked OP to report the issue here anyway since I do not believe this is the intended behavior. For context, the issue is occurring when using the `ssl.create_default_context` function and not by manually adding the verify flag. For this, the default (in my opinion) should be to ignore any invalid certificates. Even the comment in the relevent code (https://github.com/python/cpython/blob/84975146a7ce64f1d50dcec8311b7f7188a5c962/Lib/ssl.py#L772-L774) seem to agree with my sentiment. I ask that you please reconsider your stance on this issue. Thanks

Hi,

I am the maintainer of the above mentioned project. I was planning to implement a patch for this. But I asked OP to report the issue here anyway since I do not believe this is the intended behavior. 

For context, the issue is occurring when using the `ssl.create_default_context` function and not by manually adding the verify flag. For this, the default (in my opinion) should be to ignore any invalid certificates. Even the comment in the relevent code (https://github.com/python/cpython/blob/84975146a7ce64f1d50dcec8311b7f7188a5c962/Lib/ssl.py#L772-L774) seem to agree with my sentiment. 

I ask that you please reconsider your stance on this issue. Thanks

History
Date	User	Action	Args
2021-09-28 16:38:28	pukkandan	set	recipients: + pukkandan, paul.moore, tim.golden, zach.ware, steve.dower, MDM-1
2021-09-28 16:38:28	pukkandan	set	messageid: <[email protected]>
2021-09-28 16:38:28	pukkandan	link	issue45312 messages
2021-09-28 16:38:28	pukkandan	create