Browse Source

Merge pull request #9258 from SomberNight/202410_py313_ssl

interface: disable ssl.VERIFY_X509_STRICT for self-signed certs
master
ghost43 1 year ago committed by GitHub
parent
commit
3a2dfb34cf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 3
      electrum/interface.py

3
electrum/interface.py

@ -513,6 +513,9 @@ class Interface(Logger):
else: else:
# pinned self-signed cert # pinned self-signed cert
sslc = ssl.create_default_context(purpose=ssl.Purpose.SERVER_AUTH, cafile=self.cert_path) sslc = ssl.create_default_context(purpose=ssl.Purpose.SERVER_AUTH, cafile=self.cert_path)
# note: Flag "ssl.VERIFY_X509_STRICT" is enabled by default in python 3.13+ (disabled in older versions).
# We explicitly disable it as it breaks lots of servers.
sslc.verify_flags &= ~ssl.VERIFY_X509_STRICT
sslc.check_hostname = False sslc.check_hostname = False
return sslc return sslc

Loading…
Cancel
Save