DeepSurface Security comments

Results 3 comments of


                                            DeepSurface Security

Feature request: Pass certificates and keys without writing them to disk

Another reason to allow usage of pyopenssl is that the `ssl` module doesn't have any way to control the verification callback. Specifically, I'm referring to this method: https://www.pyopenssl.org/en/latest/api/ssl.html#OpenSSL.SSL.Context.set_verify If you...

Feature request: Pass certificates and keys without writing them to disk

Here's what I was able to get working, based on @tomchristie's post a year ago: ``` ctx = certificates.TOFUContext(verifier, 'any_tls', logger=logger) pool = httpcore.ConnectionPool(ssl_context=ctx) transport = httpx.HTTPTransport() transport._pool = pool...

Feature request: Pass certificates and keys without writing them to disk

Unfortunately my solution above still has race conditions. Even though I'm setting `timeout=None`, somewhere along the line the socket is switched to nonblocking and that results in race conditions during...