setuptools.ssl_support Namespace Reference

Classes
class	CertificateError
class	VerifyingHTTPSHandler
class	VerifyingHTTPSConn

Functions
def	_dnsname_match
def	match_hostname
def	opener_for
def	get_win_certfile
def	find_ca_bundle

Variables
	ssl = None
list	__all__
string	cert_paths
	HTTPSHandler = object
tuple	is_available = sslisnotNoneandobjectnotin(HTTPSHandler, HTTPSConnection)
	CertificateError = None
	match_hostname = None
	_wincerts = None

Function Documentation

def setuptools.ssl_support._dnsname_match (   dn,   hostname,   max_wildcards = 1  )

private

Matching according to RFC 6125, section 6.4.3

http://tools.ietf.org/html/rfc6125#section-6.4.3

def setuptools.ssl_support.find_ca_bundle

(

)

Return an existing CA bundle path, or None

def setuptools.ssl_support.get_win_certfile

(

)

def setuptools.ssl_support.match_hostname	(		cert,
			hostname
	)

Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*.  RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.

CertificateError is raised on failure. On success, the function
returns nothing.

def setuptools.ssl_support.opener_for

(

ca_bundle = None

)

Get a urlopen() replacement that uses ca_bundle for verification

Variable Documentation

list setuptools.ssl_support.__all__

Initial value:

= [
    'VerifyingHTTPSHandler', 'find_ca_bundle', 'is_available', 'cert_paths',
    'opener_for'
]

setuptools.ssl_support._wincerts = None

string setuptools.ssl_support.cert_paths

Initial value:

= """
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-certificates.crt
/usr/share/ssl/certs/ca-bundle.crt
/usr/local/share/certs/ca-root.crt
/etc/ssl/cert.pem
/System/Library/OpenSSL/certs/cert.pem
"""

setuptools.ssl_support.CertificateError = None

setuptools.ssl_support.HTTPSHandler = object

tuple setuptools.ssl_support.is_available = sslisnotNoneandobjectnotin(HTTPSHandler, HTTPSConnection)

setuptools.ssl_support.match_hostname = None

setuptools.ssl_support.ssl = None