fritzy/SleekXMPP — Issue #144: Poor Handling of SSL Verification Failures
Author: teisenbe
Created: 2012-02-04 13:11:56+00:00
State: open

If the ssl module fails to verify the server's certificate, it raises an SSLError that is never caught and never propagated to the user. This can be easily triggered by creating an instance of ClientXMPP and setting its ca_certs attribute to the name of a file containing a cert that does not match the server that is being connected to.