Merge pull request #9258 from SomberNight/202410_py313_ssl

interface: disable ssl.VERIFY_X509_STRICT for self-signed certs
2024-10-20 14:57:19 +00:00
parent 4e47e07550 92d6792b38
commit 3a2dfb34cf
1 changed files with 3 additions and 0 deletions
--- a/electrum/interface.py
+++ b/electrum/interface.py
@@ -513,6 +513,9 @@ class Interface(Logger):
        else:
            # pinned self-signed cert
            sslc = ssl.create_default_context(purpose=ssl.Purpose.SERVER_AUTH, cafile=self.cert_path)
+            # note: Flag "ssl.VERIFY_X509_STRICT" is enabled by default in python 3.13+ (disabled in older versions).
+            #       We explicitly disable it as it breaks lots of servers.
+            sslc.verify_flags &= ~ssl.VERIFY_X509_STRICT
            sslc.check_hostname = False
        return sslc