]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
Issue #25940: Use self-signed.pythontest.net in SSL tests
authorMartin Panter <vadmium+py@gmail.com>
Fri, 15 Jan 2016 00:25:29 +0000 (00:25 +0000)
committerMartin Panter <vadmium+py@gmail.com>
Fri, 15 Jan 2016 00:25:29 +0000 (00:25 +0000)
commit71202bb053539c58043297965557809debbd1fa0
tree881ed9409f30c2af437669d1e45394169ee84f30
parent07f24c50e0bbdd83e918af50151901e7b2cd9fb7
Issue #25940: Use self-signed.pythontest.net in SSL tests

This is instead of svn.python.org, whose certificate recently expired, and
whose new certificate uses a different root certificate.

The certificate used at the pythontest server was modifed to set the "basic
constraints" CA flag. This flag seems to be required for test_get_ca_certs_
capath() to work.

Added the new self-signed certificate to capath with the following commands:

cp Lib/test/{selfsigned_pythontestdotnet.pem,capath/}
c_rehash -v Lib/test/capath/
c_rehash -v -old Lib/test/capath/
# Note the generated file names
cp Lib/test/capath/{selfsigned_pythontestdotnet.pem,0e4015b9.0}
mv Lib/test/capath/{selfsigned_pythontestdotnet.pem,ce7b8643.0}

When attempting to connect to port 444 on the new server, the resulting error
code is EHOSTUNREACH on Linux, and ETIMEDOUT on Windows.
Lib/test/capath/0e4015b9.0 [new file with mode: 0644]
Lib/test/capath/ce7b8643.0 [new file with mode: 0644]
Lib/test/https_svn_python_org_root.pem [deleted file]
Lib/test/selfsigned_pythontestdotnet.pem
Lib/test/test_ssl.py
Misc/NEWS