fix: SSL verification for any DNS (#760)

hacf-fr · Jan 9, 2025 · 39735aa · 39735aa
1 parent 0de632b
commit 39735aa
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 5 deletions.
diff --git a/pyproject.toml b/pyproject.toml
@@ -8,7 +8,7 @@ readme = "README.rst"
 homepage = "https://github.com/hacf-fr/freebox-api"
 repository = "https://github.com/hacf-fr/freebox-api"
 documentation = "https://freebox-api.readthedocs.io"
-keywords=["freebox"]
+keywords=["freebox", "iliadbox"]
 classifiers = [
     "Operating System :: OS Independent",
     "Development Status :: 5 - Production/Stable",

diff --git a/src/freebox_api/aiofreepybox.py b/src/freebox_api/aiofreepybox.py
@@ -122,10 +122,9 @@ async def open(self, host: str, port: str) -> None:
         cert_path = path.join(path.dirname(__file__), "freebox_certificates.pem")
         ssl_ctx = ssl.create_default_context()
         ssl_ctx.load_verify_locations(cafile=cert_path)
-        if ".fbxos.fr" in host or "mafreebox.freebox.fr" in host:
-            # Disable strict validating introduced in Python 3.13, which doesn't
-            # work with default Freebox certificates
-            ssl_ctx.verify_flags &= ~ssl.VERIFY_X509_STRICT
+        # Disable strict validation introduced in Python 3.13, which doesn't
+        # work with Freebox/iliadbox self-signed gateway certificates
+        ssl_ctx.verify_flags &= ~ssl.VERIFY_X509_STRICT
 
         conn = TCPConnector(ssl_context=ssl_ctx)
         self._session = ClientSession(connector=conn)