Changeset 12e6ca8

Timestamp:

Dec 1, 2008 4:57:49 PM (16 years ago)

Author:

Ted Faber <faber@…>

Branches:

axis_example, compt_changes, info-ops, master, version-1.30, version-2.00, version-3.01, version-3.02

Children:

227f558

Parents:

f92db31

Message:

Code to accept self signed certs under older M2Crypto

File:

• fedd/federation/util.py (modified) (1 diff)

fedd/federation/util.py

@@ -43 +43 @@
             self.set_verify(SSL.verify_peer, 10)
         else:
-            self.set_verify(SSL.verify_peer, 10, 
-                callback=SSL.cb.ssl_verify_callback_allow_unknown_ca)
+            # More legacy code.  Recent versions of M2Crypto express the
+            # allow_unknown_ca option through a callback turned to allow it.
+            # Older versions use a standard callback that respects the
+            # attribute.  This should work under both regines.
+            callb = getattr(SSL.cb, 'ssl_verify_callback_allow_unknown_ca', 
+                    SSL.cb.ssl_verify_callback)
+            self.set_allow_unknown_ca(True)
+            self.set_verify(SSL.verify_peer, 10, callback=callb)
 
 def read_simple_accessdb(fn, auth, mask=[]):