Server certificate validation

fritzy / SleekXMPP

Python 2.6+/3.1+ XMPP Library

http://groups.google.com/group/sleekxmpp-discussion

Other

1.1k stars 299 forks source link

Server certificate validation #68

Closed thom-nic closed 13 years ago

thom-nic commented 13 years ago

Option to validate the server's SSL certificate chain. This prevents man-in-the-middle attacks and ensures you're actually connected to who you think you're connected to :)

This is backwards-compatible -- if xmlstream.ca_certs is unset, it does not attempt to validate the certificate.

See: tomstrummer/SleekXMPP@8e95ae294822 tomstrummer/SleekXMPP@85d8b9270f1

thom-nic commented 13 years ago

Another related commit: tomstrummer/SleekXMPP@f3cf5f6080b

macdiesel commented 13 years ago

Merged commit against beta-2 tag may be found here: https://github.com/macdiesel/SleekXMPP/commit/30fc9a677a7391fd9035e96995d1ced8be19d4e3

legastero commented 13 years ago

Added to the develop branch.

I made some slight changes to keep line lengths shorter, and added some brief docs on self.ca_certs.

Keep up the great work you two!