From: Guido van Rossum <guido@dropbox.com>
Date: Sat, 19 Oct 2013 16:52:09 +0000 (-0700)
Subject: Verify hostname if verify_mode is CERT_OPTIONAL too.
X-Git-Tag: v3.4.0a4~26
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f19a6ef2c9e87f7a5429b2fcf0705265bdeb8b34;p=thirdparty%2FPython%2Fcpython.git

Verify hostname if verify_mode is CERT_OPTIONAL too.
---

diff --git a/Lib/asyncio/selector_events.py b/Lib/asyncio/selector_events.py
index 63164f058bbf..dee23064b7b6 100644
--- a/Lib/asyncio/selector_events.py
+++ b/Lib/asyncio/selector_events.py
@@ -604,7 +604,7 @@ class _SelectorSslTransport(_SelectorTransport):
         # Verify hostname if requested.
         peercert = self._sock.getpeercert()
         if (self._server_hostname is not None and
-            self._sslcontext.verify_mode == ssl.CERT_REQUIRED):
+            self._sslcontext.verify_mode != ssl.CERT_NONE):
             try:
                 ssl.match_hostname(peercert, self._server_hostname)
             except Exception as exc: