Re: SSLSocket.getpeercert() doesn't return issuer, serial number, etc

Path	csiph.com!usenet.pasdenom.info!gegeweb.org!de-l.enfer-du-nord.net!feeder1.enfer-du-nord.net!newsfeed.eweka.nl!eweka.nl!feeder3.eweka.nl!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path	<python-python-list@m.gmane.org>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.001
X-Spam-Evidence	'H': 1.00; 'S': 0.00; 'value,': 0.03; 'python': 0.09; '(although': 0.09; 'does,': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'subject:number': 0.09; 'essential': 0.15; 'design:': 0.16; 'from:addr:pitrou.net': 0.16; 'from:addr:solipsis': 0.16; 'from:name:antoine pitrou': 0.16; 'message-id:@post.gmane.org': 0.16; 'received:213.41.240': 0.16; 'received:213.41.240.54': 0.16; 'received:80.91.229.3': 0.16; 'received:charlus.yi.org': 0.16; 'received:plane.gmane.org': 0.16; 'received:yi.org': 0.16; 'this)': 0.16; 'url:py3k': 0.16; 'doc': 0.22; 'url:bugs': 0.24; 'header:User-Agent:1': 0.26; 'looks': 0.26; 'reflect': 0.27; "doesn't": 0.28; 'header:X-Complaints- To:1': 0.28; 'writes:': 0.29; 'returned': 0.30; 'url:python': 0.32; 'to:addr:python-list': 0.33; 'updated': 0.34; 'certificate': 0.35; 'open': 0.35; 'received:org': 0.36; 'url:org': 0.36; 'url:library': 0.36; 'client': 0.36; 'should': 0.36; 'charset:us- ascii': 0.36; 'subject:: ': 0.38; 'some': 0.38; 'url:docs': 0.38; 'to:addr:python.org': 0.39; 'hello,': 0.39; 'header:Received:5': 0.40; 'subject:, ': 0.61; 'information': 0.63; 'serial': 0.66; 'antoine.': 0.84; 'etc),': 0.84; 'url:pro': 0.84; 'subject:skip:S 20': 0.91
X-Injected-Via-Gmane	http://gmane.org/
To	python-list@python.org
From	Antoine Pitrou <solipsis@pitrou.net>
Subject	Re: SSLSocket.getpeercert() doesn't return issuer, serial number, etc
Date	Thu, 16 Aug 2012 11:48:39 +0000 (UTC)
References	<CAGv_rMieX1hTzxuKXixC=2hm0es3VR-3tgNpGQTUgU42uk2+fw@mail.gmail.com>
Mime-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Transfer-Encoding	7bit
X-Gmane-NNTP-Posting-Host	sea.gmane.org
User-Agent	Loom/3.14 (http://gmane.org/)
X-Loom-IP	213.41.240.54 (Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1)
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.12
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups	comp.lang.python
Message-ID	<mailman.3357.1345117736.4697.python-list@python.org> (permalink)
Lines	26
NNTP-Posting-Host	2001:888:2000:d::a6
X-Trace	1345117736 news.xs4all.nl 6964 [2001:888:2000:d::a6]:54537
X-Complaints-To	abuse@xs4all.nl
Xref	csiph.com comp.lang.python:27156

Show key headers only | View raw

Hello,

Gustavo Baratto <gbaratto <at> gmail.com> writes:
> 
> SSL.Socket.getpeercert() doesn't return essential information present in the
> client certificate (issuer, serial number, not before, etc), and it looks it is
> by design:

It does, in Python 3.2:
http://docs.python.org/py3k/library/ssl.html#client-side-operation

(although the getpeercert() doc should be updated to reflect this)

If some information is still lacking from the returned value, please open an 
issue at http://bugs.python.org

Regards

Antoine.


-- 
Software development and contracting: http://pro.pitrou.net

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread

Thread

Re: SSLSocket.getpeercert() doesn't return issuer, serial number, etc Antoine Pitrou <solipsis@pitrou.net> - 2012-08-16 11:48 +0000

csiph-web