bpo-35941: Fix ssl certificate enumeration for windows (GH-12486)

Add a function to collect certificates from several certificate stores into one certificate collection store that is then enumerated. This ensures we load as many certificates as we can access.
This commit is contained in:
kctherookie 2019-03-29 00:59:06 +07:00 committed by Steve Dower
parent 45a5fdb91c
commit d93fbbf88e
2 changed files with 92 additions and 20 deletions

View file

@ -0,0 +1,3 @@
enum_certificates function of the ssl module now returns certificates from all available certificate stores inside windows in a query instead of returning only certificates from the system wide certificate store.
This includes certificates from these certificate stores: local machine, local machine enterprise, local machine group policy, current user, current user group policy, services, users.
ssl.enum_crls() function is changed in the same way to return all certificate revocation lists inside the windows certificate revocation list stores.