#PYTHON 2.7.9 HTTP.SERVER PATCH#
#PYTHON 2.7.9 HTTP.SERVER VERIFICATION#

Test_404 (test.test_urllib2_localnet.TestUrlopen). Test_200_with_parameters (test.test_urllib2_localnet.TestUrlopen). Test_200 (test.test_urllib2_localnet.TestUrlopen). Test_proxy_with_no_password_raises_httperror (test.test_urllib2_localnet.ProxyAuthTests). Test_proxy_with_bad_password_raises_httperror (test.test_urllib2_localnet.ProxyAuthTests). Test_proxy_qop_auth_works (test.test_urllib2_localnet.ProxyAuthTests). Test_proxy_qop_auth_int_works_or_throws_urlerror (test.test_urllib2_localnet.ProxyAuthTests). Test_basic_auth_success (test.test_urllib2_localnet.BasicAuthTests). Test_basic_auth_httperror (test.test_urllib2_localnet.BasicAuthTests).

Testing with flags: sys.flags(debug=0, inspect=0, interactive=0, optimize=0, dont_write_bytecode=0, no_user_site=0, no_site=0, ignore_environment=0, verbose=0, bytes_warning=0, quiet=0, hash_randomization=1, isolated=0)

python Lib/test/regrtest.py -v test_urllib2_localnet is signed by CACert, which is in the root on some machines.Р”Р„uthor: Benjamin Peterson (benjamin.peterson) *

#PYTHON 2.7.9 HTTP.SERVER PATCH#

New version of the patch based on feedback from benjamin, should make it easier to do the 3.4 branch stuff. Updates to teh docs based on teh feedback from Antoine. Patch now makes more precise assertions about the type of error that's occurring. Needs review please, I suspect we need more docs in more places. Patch with the implementation, and initial work on documentation. (Note that I'm busy most of this weekend, so +1 from me in advance if you decide to go ahead with getting it into 3.4.2) Otherwise we can get it ready for 2.7.9 with the other SSL changes, and it will appear in the 3.4.3 maintenance release, rather than 3.4.2. There's still the issue 22366 backport patch, PEP update, docs updates and What's New updates to go, so assigning to Alex to decide if he wants to work with Larry to get this ready to go for 3.4.2 (noting that the PEP still needs the final tick of approval from Guido after being updated to reflect the proposed implementation). However, that was before Senthil accepted the patch in 22366 for 3.5, which means we're at 'feature complete' for the proposed changes. Ssl._create_stdlib_context = ssl.create_default_contextР”В¬urrently marking as a deferred blocker, as Alex wasn't sure he'd be able to get PEP 476 fully updated in time for 3.4.2rc1, and was willing to accept waiting for 2.7.9 and 3.4.3 rather than delaying 3.4.2 any further. To monkeypatch the stdlib to validate *everything* (this one isn't new, just noting it for the record): Ssl._create_default_https_context = ssl._create_unverified_context The process wide 'revert to the old behaviour' hook is to monkeypatch the ssl module:

It doesn't currently include any docs changes, or changes to urllib. Minimal changes to verify HTTPS by defaultР”Р„ttached minimal patch updates to validate certs by default and adjusts test.test_httplib accordingly. (And I could set SSL_CERT_FILE in my environment too, but I'd rather not have to do that all the time.PEP 476: verify HTTPS certificates by defaultР”Р„rfrever, alex, benjamin.peterson, christian.heimes, clopez, dstufft, jcea, jwilk, koobs, larry, ncoghlan, orsenthil, python-dev, raulcdР”В¬reated on 12:34 by ncoghlan, last changed 09:42 by christian.heimes. I've worked around this by creating an appropriate symlink, but is there a better approach? Should this be necessary, or is this something that should have been addressed by the port itself? My Python installation expects the latter: > ssl.get_default_verify_paths() I have /usr/local/etc/ssl/cert.pem (which is a symlink to /usr/local/share/certs/ca-root-nss.crt) but not /etc/ssl/cert.pem. Surprisingly, it broke my scripts that connected to servers with valid SSL certificates. Unsurprisingly, it broke my existing Python scripts that connected to servers with self-signed certificates.

#PYTHON 2.7.9 HTTP.SERVER VERIFICATION#

I have a FreeBSD 10.0 system, and a couple of days ago, I upgraded my python27 port from Python 2.7.8 to Python 2.7.9, which enabled SSL verification by default.

Python 2.7.9 http.server