Re: Access to Windows' cert store

--===============1715008417==
Content-Type: multipart/signed; boundary="Apple-Mail=_48A96249-7C48-4DBB-97A5-2FD7F3C671B0"; protocol="application/pgp-signature"; micalg=pgp-sha1


--Apple-Mail=_48A96249-7C48-4DBB-97A5-2FD7F3C671B0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252


On Mar 21, 2013, at 9:32 AM, Christian Heimes <[email protected]> =
wrote:

> Am 21.03.2013 13:58, schrieb M.-A. Lemburg:
>> Why not simply use the Firefox certs ?
>>=20
>> We started adding these to our pyOpenSSL distribution with the last =
release:
>> =
https://cms.egenix.com/products/python/pyOpenSSL/doc/#Module_OpenSSL.ca_bu=
ndle
>=20
> Sure, that's another viable option. But IIRC some people have raised
> license concerns.

Firefox bundle is releases under the MPL which only applies to the =
individual files and not the entire project.

>=20
>> You can setup OpenSSL Contexts to validate based in-memory
>> certificate as well: just add the certs one by one to the
>> Context using the X509Store object you can obtain using
>> context.get_cert_store().
>=20
> I assume you are talking about pyOpenSSL? I was referring to Python's
> SSL module. It can only load CA certs from a file or directory. It =
would
> be a useful feature for Python's SSL module, too.
>=20
>> I think this would be useful addition for pyOpenSSL as well - if
>> it's possible to extract the Windows certificates without admin
>> rights.
>=20
> The code works without special privileges. The MSDN references don't
> mention any restrictions, too. The code is rather simple -- I'm only
> using four functions and three structs.

I would love to see this added to Python Core. As it is right now if =
OpenSSL is configured correctly you can do `urllib.request.urlopen("=85", =
cadefault=3DTrue)` and things will just work. This breaks down on =
Windows though.

>=20
> Christian
> _______________________________________________
> Catalog-SIG mailing list
> [email protected]
> http://mail.python.org/mailman/listinfo/catalog-sig


-----------------
Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 =
DCFA


--Apple-Mail=_48A96249-7C48-4DBB-97A5-2FD7F3C671B0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
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=kygn
-----END PGP SIGNATURE-----

--Apple-Mail=_48A96249-7C48-4DBB-97A5-2FD7F3C671B0--

--===============1715008417==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Catalog-SIG mailing list
[email protected]
http://mail.python.org/mailman/listinfo/catalog-sig

--===============1715008417==--