[3.5] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) by gpshead · Pull Request #13200 · python/cpython

Conversation

The 3.5 tree also needed a certificate in the capath directory updated.
The filename for that was determined by `openssl x509 -in $cert.pem -subject_hash`.

@gpshead

without this PR, python3.5 -m test.regrtest -u all test_httplib test_ssl will fail due to a certificate mismatch vs the updated cert on our server.

vstinner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

This PR is needed for PR #13207, an important security fix: prevent HTTP Header Injection.

@bedevere-bot

@larryhastings: Please replace # with GH- in the commit message next time. Thanks!

@larryhastings

Labels