[Twisted-Python] ISSLTransport.getPeerCertificate returning None?

Phil Mayers p.mayers at imperial.ac.uk
Tue Dec 10 06:51:44 MST 2013


On 10/12/13 13:21, exarkun at twistedmatrix.com wrote:
> On 08:41 am, p.mayers at imperial.ac.uk wrote:
>> On 09/12/13 22:19, Laurens Van Houtven wrote:
>>> ... but in the server's AMP protocol,
>>> self.transport.getPeerCertificate() is still None :/
>>
>> Unless you set the appropriate verify options on the server side too,
>> the client cert isn't available for inspection.
>
> twisted.internet.ssl.CertificateOptions sets these by default.  If you
> use it, you shouldn't need to do anything else.

Are you sure about that? It does not match my recollection.



More information about the Twisted-Python mailing list