Verify hostname if verify_mode is CERT_OPTIONAL too.

2013-10-19 09:52:09 -07:00 · 2013-10-19 09:52:09 -07:00 · f19a6ef2c9
parent 3743711a96
commit f19a6ef2c9
1 changed files with 1 additions and 1 deletions
--- a/Lib/asyncio/selector_events.py
+++ b/Lib/asyncio/selector_events.py
@ -604,7 +604,7 @@ class _SelectorSslTransport(_SelectorTransport):
        # Verify hostname if requested.
        peercert = self._sock.getpeercert()
        if (self._server_hostname is not None and
-            self._sslcontext.verify_mode == ssl.CERT_REQUIRED):
+            self._sslcontext.verify_mode != ssl.CERT_NONE):
            try:
                ssl.match_hostname(peercert, self._server_hostname)
            except Exception as exc: