set check_hostname attribute before setiing verify_mode.

This commit is contained in:
liris
2015-04-20 10:25:11 +09:00
parent ced3c3e1b6
commit b96a2e8fa7

View File

@@ -124,10 +124,11 @@ def _can_use_sni():
def _wrap_sni_socket(sock, sslopt, hostname, check_hostname):
context = ssl.SSLContext(sslopt.get('ssl_version', ssl.PROTOCOL_SSLv23))
context.load_verify_locations(cafile=sslopt.get('ca_certs', None))
context.verify_mode = sslopt['cert_reqs']
if HAVE_CONTEXT_CHECK_HOSTNAME:
context.check_hostname = check_hostname
context.load_verify_locations(cafile=sslopt.get('ca_certs', None))
context.verify_mode = sslopt['cert_reqs']
if 'ciphers' in sslopt:
context.set_ciphers(sslopt['ciphers'])