The opening session at the 2016 Python Language Summit concerned the ssl module in the standard library. Cory Benfield and Christian Heimes described some of the problems that the module suffers from ...
The string formatting of subjectAltName X509Extension instances in pyOpenSSL before 0.13.1 incorrectly truncated fields of the name when encountering a null byte, possibly allowing man-in-the-middle ...