diff options
| author | Lance Stout <lancestout@gmail.com> | 2012-05-22 03:56:06 -0700 |
|---|---|---|
| committer | Lance Stout <lancestout@gmail.com> | 2012-05-22 03:56:06 -0700 |
| commit | f49311ef9ee76c2e4cce402e377867eff308aca0 (patch) | |
| tree | 50bb75037f13552d1c77ea23c1f46dcb69e7a3bf /sleekxmpp/clientxmpp.py | |
| parent | 678e529efc0e6fff65133de6769a5596034d90c6 (diff) | |
| download | slixmpp-f49311ef9ee76c2e4cce402e377867eff308aca0.tar.gz slixmpp-f49311ef9ee76c2e4cce402e377867eff308aca0.tar.bz2 slixmpp-f49311ef9ee76c2e4cce402e377867eff308aca0.tar.xz slixmpp-f49311ef9ee76c2e4cce402e377867eff308aca0.zip | |
Add better certificate handling.
Certificate host names are now matched (using DNS, SRV, XMPPAddr, and
Common Name), along with expiration check.
Scheduled event to reset the stream once the server's cert expires.
Handle invalid cert trust chains gracefully now.
Diffstat (limited to 'sleekxmpp/clientxmpp.py')
| -rw-r--r-- | sleekxmpp/clientxmpp.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sleekxmpp/clientxmpp.py b/sleekxmpp/clientxmpp.py index e77e6ce2..94ced031 100644 --- a/sleekxmpp/clientxmpp.py +++ b/sleekxmpp/clientxmpp.py @@ -149,6 +149,8 @@ class ClientXMPP(BaseXMPP): address = (self.boundjid.host, 5222) self.dns_service = 'xmpp-client' + self._expected_server_name = self.boundjid.host + return XMLStream.connect(self, address[0], address[1], use_tls=use_tls, use_ssl=use_ssl, reattempt=reattempt) |