Skip to content
This repository has been archived by the owner on Sep 7, 2024. It is now read-only.

SSL connections don't verify server name #178

Open
JonathanRRogers opened this issue Nov 6, 2019 · 0 comments
Open

SSL connections don't verify server name #178

JonathanRRogers opened this issue Nov 6, 2019 · 0 comments

Comments

@JonathanRRogers
Copy link

JonathanRRogers commented Nov 6, 2019

Python standard library function ssl.wrap_socket() is deprecated because it doesn't handle server host names. Since pg8000 uses that function, it can't properly secure connections to Postgres. In contrast, psycopg2 exposes libpq's "sslmode" parameter, which when set to "verify-full" verifies server hostname.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant