Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable disabling hostname verification for macOS and Windows #152

Merged
merged 3 commits into from
Oct 23, 2024

Conversation

sethmlarson
Copy link
Owner

@sethmlarson sethmlarson commented Aug 23, 2024

Currently we "disable" hostname verification on macOS by ignoring a hostname mismatch error. Instead we can not set a policy to check the hostname, then we don't need to ignore any errors for this functionality.

For Windows, instead of ignoring all name errors for certificates we can ignore only a mismatch.

@sethmlarson sethmlarson force-pushed the macos-set-hostname-only-when-verifying branch from dead3d2 to fdcb7aa Compare October 22, 2024 14:34
@sethmlarson sethmlarson changed the title Only provide a hostname to SecCreatePolicySSL when verifying Enable disabling hostname verification for macOS and Windows Oct 23, 2024
@sethmlarson sethmlarson force-pushed the macos-set-hostname-only-when-verifying branch from 3599718 to 197ed07 Compare October 23, 2024 20:09
@sethmlarson sethmlarson force-pushed the macos-set-hostname-only-when-verifying branch from 197ed07 to ca375dd Compare October 23, 2024 20:53
Copy link
Collaborator

@davisagli davisagli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm on board with this, once the builds pass.

@sethmlarson sethmlarson merged commit 3491641 into main Oct 23, 2024
19 checks passed
@sethmlarson sethmlarson deleted the macos-set-hostname-only-when-verifying branch October 23, 2024 20:58
@achapkowski
Copy link

Will this trigger a release?

@sethmlarson
Copy link
Owner Author

@achapkowski 0.10.0 is available on PyPI! :)

@achapkowski
Copy link

Awesome thank you again

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants