From 63b1ee8d17cf6d7549046749e24301f3fbb426a5 Mon Sep 17 00:00:00 2001 From: Jeremiah Mackey Date: Thu, 19 Mar 2026 16:02:17 +0000 Subject: [PATCH] Enforce CERT_REQUIRED for check_hostname --- wolfssl/__init__.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/wolfssl/__init__.py b/wolfssl/__init__.py index 204bdcd..7678fb5 100644 --- a/wolfssl/__init__.py +++ b/wolfssl/__init__.py @@ -215,8 +215,11 @@ class SSLContext(object): @check_hostname.setter def check_hostname(self, value): if value is not True and value is not False: - raise ValueError("check_hostname must be either True or False") - + raise ValueError("check_hostname must be either " + "True or False") + if value and self._verify_mode != CERT_REQUIRED: + raise ValueError("check_hostname needs verify_mode " + "set to CERT_REQUIRED") self._check_hostname = value def get_options(self):