Comment 8 for bug 729185

Hello Olaf,

Olaf Meeuwissen [2011-03-11 1:54 -0000]:
> Re #5, we've tested with the fixed code and getting the GPG fingerprint
> worked fine for us.


> Not familiar with the python-pycurl code, I've one little question. The
> code seemed aimed at adding hostname validation,
> something HTTPSConnection didn't do. Assuming that was done on purpose,
> I guess the replacement code should do the same. Does pycurl do the
> validation?

Yes, it does by default:

Both the old ( and the new (pycurl) implementation
are covered by various test cases, amongst them one for a nonmatching
host name: