Changeset f069052 for fedd/fedd/util.py

Timestamp:

Nov 30, 2008 5:38:16 PM (15 years ago)

Author:

Ted Faber <faber@…>

Branches:

axis_example, compt_changes, info-ops, master, version-1.30, version-2.00, version-3.01, version-3.02

Children:

05191a6

Parents:

edbc841

Message:

Two changes. Get allow_any_CA checking to work (i.e., self signed certs or
certs signed by an unknown entity) and put more of the ZSI-dependent stuff into
the hidden parts or remote_services. Now those routines will find all the
relevant classes and part names from the naming conventions.

File:

• fedd/fedd/util.py (modified) (1 diff)

fedd/fedd/util.py

@@ -35 +35 @@
         else:
             self.load_cert(my_cert)
-        if trusted_certs != None: self.load_verify_locations(trusted_certs)
-        self.set_verify(SSL.verify_peer, 10)
+
+        # If no trusted certificates are specified, allow unknown CAs.
+        if trusted_certs: 
+            self.load_verify_locations(trusted_certs)
+            self.set_verify(SSL.verify_peer, 10)
+        else:
+            self.set_verify(SSL.verify_peer, 10, 
+                callback=SSL.cb.ssl_verify_callback_allow_unknown_ca)
 
 def pack_id(id):