From be5f2c192cde200b6fcc8d754fde8b5e479a300c Mon Sep 17 00:00:00 2001 From: Philipp Hagemeister Date: Thu, 15 Jan 2015 02:06:48 +0100 Subject: [PATCH] [ssl] Correct connect creation We want to authenticate the server, see https://docs.python.org/dev/library/ssl.html#ssl.Purpose.SERVER_AUTH . --- youtube_dl/utils.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/youtube_dl/utils.py b/youtube_dl/utils.py index 38c18c127..2546fa45d 100644 --- a/youtube_dl/utils.py +++ b/youtube_dl/utils.py @@ -399,8 +399,9 @@ def formatSeconds(secs): def make_HTTPS_handler(params, **kwargs): opts_no_check_certificate = params.get('nocheckcertificate', False) if hasattr(ssl, 'create_default_context'): # Python >= 3.4 or 2.7.9 - context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH) + context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH) if opts_no_check_certificate: + context.check_hostname = False context.verify_mode = ssl.CERT_NONE try: return YoutubeDLHTTPSHandler(params, context=context, **kwargs)