Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
set default verify flag
  • Loading branch information
youknowone committed Oct 26, 2025
commit e568f493e396dcea07a63d9889a27659612820ca
7 changes: 7 additions & 0 deletions stdlib/src/ssl.rs
Original file line number Diff line number Diff line change
Expand Up @@ -568,6 +568,13 @@ mod _ssl {
.set_session_id_context(b"Python")
.map_err(|e| convert_openssl_error(vm, e))?;

// Set default verify flags: VERIFY_X509_TRUSTED_FIRST
unsafe {
let ctx_ptr = builder.as_ptr();
let param = sys::SSL_CTX_get0_param(ctx_ptr);
sys::X509_VERIFY_PARAM_set_flags(param, sys::X509_V_FLAG_TRUSTED_FIRST);
}

PySslContext {
ctx: PyRwLock::new(builder),
check_hostname: AtomicCell::new(check_hostname),
Expand Down