From: Philipp Hagemeister <phihag@phihag.de>
Date: Thu, 15 Jan 2015 01:06:48 +0000 (+0100)
Subject: [ssl] Correct connect creation
X-Git-Url: http://git.oshgnacknak.de/?a=commitdiff_plain;h=be5f2c192cde200b6fcc8d754fde8b5e479a300c;p=youtube-dl

[ssl] Correct connect creation

We want to authenticate the server, see https://docs.python.org/dev/library/ssl.html#ssl.Purpose.SERVER_AUTH .
---

diff --git a/youtube_dl/utils.py b/youtube_dl/utils.py
index 38c18c127..2546fa45d 100644
--- a/youtube_dl/utils.py
+++ b/youtube_dl/utils.py
@@ -399,8 +399,9 @@ def formatSeconds(secs):
 def make_HTTPS_handler(params, **kwargs):
     opts_no_check_certificate = params.get('nocheckcertificate', False)
     if hasattr(ssl, 'create_default_context'):  # Python >= 3.4 or 2.7.9
-        context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)
+        context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH)
         if opts_no_check_certificate:
+            context.check_hostname = False
             context.verify_mode = ssl.CERT_NONE
         try:
             return YoutubeDLHTTPSHandler(params, context=context, **kwargs)