💾 Archived View for rawtext.club › ~sloum › geminilist › 001097.gmi captured on 2020-10-31 at 02:02:52. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2020-09-24)

-=-=-=-=-=-=-

<-- back to the mailing list

Client certificate musings

solderpunk solderpunk at SDF.ORG

Wed May 27 22:30:33 BST 2020

- - - - - - - - - - - - - - - - - - - 

On Wed, May 27, 2020 at 11:13:09PM +0200, Petite Abeille wrote:

SSL/TLS client certificate verification with Python v3.4+ SSLContext
https://www.electricmonk.nl/log/2018/06/02/ssl-tls-client-certificate-verification-with-python-v3-4-sslcontext/

Okay, I stand very slightly corrected: a Python server using thestandard library can accept a self-signed client certificate *if* thatcertificate (not just its fingerprint but the entire thing) iswhitelisted in advance of the connection. But this is insufficient foralmost all the applications we've discussed. It's of no use for thetransient client certificate paradigm, in particular.

Cheers,Solderpunk