Implement TOFU (Trust On First Use) for pyVmomi · vmware/pyvmomi#160

2014-09-09T14:37:28.000Z

See: [urllib3](https://urllib3.readthedocs.org/en/latest/security.html) and [TOFU](http://www.gnutls.org/manual/html_node/Verifying-a-certificate-using-trust-on-first-use-authentication.html) TODO: - What level of support does Python have for TOFU? - How can we make this behave appropriately for a user at the CLI versus a daemon?

(0 留言) (0 反應) (0 負責人)Python (2,141 star) (807 fork)batch import

help wantedwishlist

描述

See: urllib3 and TOFU

TODO:

What level of support does Python have for TOFU?
How can we make this behave appropriately for a user at the CLI versus a daemon?

貢獻者指南

技術棧: python
領域: security
議題類型: feature
難度: 3
預計時間: 3-5 days
活動狀態: stale
清晰度: needs investigation
前置要求: Basic PythonSSL/TLS conceptspyVmomi usage
新手友善度: 25
研究方向: Investigate Python's built in ssl module for supporting TOFU, as used in urllib3. Determine if the host key pinning approach can be adapted for the pyVmomi library's HTTP connections. Also consider whether the feature should be configurable per session or globally for CLI vs daemon use cases.