mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-09-19 15:10:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

Issue #19509: Don't close the socket in do_handshake() when hostname verification fails.

Browse source
This commit is contained in:
Christian Heimes 2013-12-04 20:46:20 +01:00
parent 31d83228c2
commit 1da3ba8697
1 changed files with 4 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Lib/ssl.py
View file

@ -764,15 +764,10 @@ class SSLSocket(socket):
self.settimeout(timeout) self.settimeout(timeout)
if self.context.check_hostname: if self.context.check_hostname:
try:
if not self.server_hostname: if not self.server_hostname:
raise ValueError("check_hostname needs server_hostname " raise ValueError("check_hostname needs server_hostname "
"argument") "argument")
match_hostname(self.getpeercert(), self.server_hostname) match_hostname(self.getpeercert(), self.server_hostname)
except Exception:
self.shutdown(_SHUT_RDWR)
self.close()
raise
def _real_connect(self, addr, connect_ex): def _real_connect(self, addr, connect_ex):
if self.server_side: if self.server_side: