mdehling

Python 3.13+ Rejects CA Certificates Missing the Key Usage Extension

Summary

Python 3.13 enables the VERIFY_X509_STRICT flag by default in ssl.create_default_context(). This enforces RFC 5280, which requires CA certificates to include the Key Usage X.509v3 extension with at least keyCertSign and cRLSign. Any CA certificate that omits this extension is now rejected at the TLS handshake with:

cameronelliott

Tutorial for turnutils_uclient and Coturn server

orimanabu

                                     

      MegaCLI SAS RAID Management Tool  Ver 8.04.07 May 28, 2012

    (c)Copyright 2011, LSI Corporation, All Rights Reserved.


NOTE: The following options may be given at the end of any command below:

    [-Silent] [-AppLogFile filename] [-NoLog] [-page[N]]