Development #752
OCSP and CRL support
Start date:
12 Oct 2011
Due date:
% Done:
0%
Estimated time:
Patch proposed:
No
Planning:
Description
Include trust path discovery: only declare an entity ID and root AC.
- Check SSL cert at SAML2 metadata connexion
- MD signature
Associated revisions
[http_utils] prefer using pycurl instead of M2Crypto to retrieve HTTPs URLS as it supports server name indication
Thanks to Jean Christophe André for the feature request and the patch.
Fixes #1419
History
Updated by Benjamin Dauvergne over 4 years ago
- Status changed from Nouveau to Rejeté
- Patch proposed set to No
Supporting OCSR and CRL is not important anymore, we will wait for support in requests: https://github.com/kennethreitz/requests/issues/1786
Add a module to perform HTTP GET with proper certificate checks
Replace all usr of urllib.urlopen by this the new function get_url.
If M2Crypto is availlable, HTTPs URLs work, if not they do not.
Closes #70