Showing content from http://mail.python.org/pipermail/python-dev/attachments/20131019/60f157af/attachment.html below:
<div dir="ltr">You should ask Glyph too. He supplied lots of useful info about cert checking on the python-tulip list.<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Oct 19, 2013 at 7:14 AM, Nick Coghlan <span dir="ltr"><<a href="mailto:ncoghlan@gmail.com" target="_blank">ncoghlan@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 19 October 2013 22:44, Christian Heimes <<a href="mailto:christian@python.org">christian@python.org</a>> wrote:<br>
> Am 19.10.2013 00:56, schrieb Guido van Rossum:<br>
</div><div class="im">> A couple of months I had a long and fruitful discussion with MAL about<br>
> the issue. Egenix PyOpenSSL installer comes with a root CA bundle. He<br>
> tried a couple of approaches to handle trust settings with OpenSSL<br>
> means. Eventually MAL had to split up the bundle into multiple files for<br>
> each purpuse, see<br>
> <a href="http://www.egenix.com/company/news/eGenix-pyOpenSSL-Distribution-0.13.2.1.0.1.5.html" target="_blank">http://www.egenix.com/company/news/eGenix-pyOpenSSL-Distribution-0.13.2.1.0.1.5.html</a><br>
><br>
> We should *really* write a PEP about it, specify all details and get a<br>
> proper review from real experts. This stuff is super complex and highly<br>
> fragile. :(<br>
<br>
</div>At the very least, it would be good if you and/or MAL could review the<br>
cert verification in pip. PEP 453 makes that kinda important :)<br>
<br>
Cheers,<br>
Nick.<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Nick Coghlan | <a href="mailto:ncoghlan@gmail.com">ncoghlan@gmail.com</a> | Brisbane, Australia<br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br>--Guido van Rossum (<a href="http://python.org/~guido">python.org/~guido</a>)
</div>
RetroSearch is an open source project built by @garambo
| Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4