Using dynamically created self signed certs in Python without touching the file system

Question

So I have a dynamically generated self signed certificate in python and I want to pass it to ssl.wrap_socket but it looks like that function only accepts a file name as a parameter.

I know I could write the file to disk and then read it back then delete it, I'm also running on Linux so I could write it to /run/user/1000/ so it doesn't have to touch a real drive but, this still feels wrong. Anyone got a way I can bypass the file generation step entirely?

httpd.socket = ssl.wrap_socket (httpd.socket, certfile="cert.pem", server_side=True)

Thanks!

Related: stackoverflow.com/a/13905835/1113760

tigermatt
– tigermatt

2016-12-06 00:32:40 +00:00
Commented Dec 6, 2016 at 0:32 — tigermatt
– tigermatt, Commented Dec 6, 2016 at 0:32

Christopher Shroba · Accepted Answer · 2016-12-06 00:32:15Z

1

No.

Unfortunately, it doesn't look like the SSL library supports it. You can view the source of the method you're calling here:

https://github.com/python/cpython/blob/master/Lib/ssl.py#L1131

and it appears the certfile name is being passed all the way along to the C code for handling SSL (you can follow the certfile parameter through a few function calls in the above file):

https://github.com/python/cpython/blob/master/Modules/_ssl.c#L3240

Sorry!!

answered Dec 6, 2016 at 0:32

Christopher Shroba

7,7148 gold badges48 silver badges76 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Roger Heathcote Over a year ago

Fair enough. I've heard a few people say openSSL is a dogs dinner, I'm starting to believe it! Thanks for the quick and definitive response.

Collectives™ on Stack Overflow

Using dynamically created self signed certs in Python without touching the file system

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related