Client certificate musings

[solderpunk]

On Wed, May 27, 2020 at 11:07:47PM +0200, Petite Abeille wrote:
> > On May 27, 2020, at 20:58, solderpunk <solderpunk at SDF.ORG> wrote:
> > 
> >  I never would have
> > imagined it would be literally impossible for a server using Python's
> > standard `ssl` module to accept a self-signed client certificate!
> 
> https://docs.python.org/3/library/ssl.html#ssl.CERT_REQUIRED

Yes, precisely:

> With server socket, this mode provides mandatory TLS client cert
> authentication. A client certificate request is sent to the client and
> the client must provide a valid and trusted certificate.

Cheers,
Solderpunk