Implement TOFU (Trust On First Use) for pyVmomi · vmware/pyvmomi#160

2014-09-09T14:37:28.000Z

See: [urllib3](https://urllib3.readthedocs.org/en/latest/security.html) and [TOFU](http://www.gnutls.org/manual/html_node/Verifying-a-certificate-using-trust-on-first-use-authentication.html) TODO: - What level of support does Python have for TOFU? - How can we make this behave appropriately for a user at the CLI versus a daemon?

(0 comments) (0 reactions) (0 assignees)Python (2,141 stars) (807 forks)batch import

help wantedwishlist

説明

See: urllib3 and TOFU

TODO:

What level of support does Python have for TOFU?
How can we make this behave appropriately for a user at the CLI versus a daemon?

コントリビューターガイド

技術スタック: python
領域: security
Issue 種別: feature
難度: 3
推定時間: 3-5 days
活動状況: stale
明確さ: needs investigation
前提条件: Basic PythonSSL/TLS conceptspyVmomi usage
初心者向け度: 25
調査方針: Investigate Python's built in ssl module for supporting TOFU, as used in urllib3. Determine if the host key pinning approach can be adapted for the pyVmomi library's HTTP connections. Also consider whether the feature should be configurable per session or globally for CLI vs daemon use cases.