Message150148
| Author |
pitrou |
| Recipients |
Dan.Kaminsky, naif, pitrou |
| Date |
2011年12月23日.10:43:07 |
| SpamBayes Score |
8.947239e-05 |
| Marked as misclassified |
No |
| Message-id |
<1324636943.3388.22.camel@localhost.localdomain> |
| In-reply-to |
<1324636613.64.0.168908913208.issue13647@psf.upfronthosting.co.za> |
| Content |
> Antoine, in case it's useful, do you think that it would be possible
> to have something exactly-like the OpenSSL verify command?
Well, to quote the page you mentioned:
"The verify program uses the same functions as the internal SSL and
S/MIME verification, therefore this description applies to these verify
operations too."
So these checks are exactly the ones performed when using CERT_OPTIONAL
or CERT_REQUIRED.
Note that it is cursorily mentioned (or hinted at) at
http://docs.python.org/dev/library/ssl.html#verifying-certificates |
|