samuraisam/pyapns — Issue #21: security issue in APNSClientContextFactory - private key output in the log
Author: khomenko
Created: 2011-11-10 21:51:39+00:00
State: open

APNSClientContextFactory logs the text of ssl_cert_file passed by the provision command. The text contains the private key in cleartext, so putting it in the log is a security hole. A one-line fix is to remove the logging statement from line 55 of pyapns/server.py.